Not rated
CVE-2021-27791 The function that is used to parse the Authentication header in Brocade Fabric OS Web application service before Brocade…
Description
The function that is used to parse the Authentication header in Brocade Fabric OS Web application service before Brocade Fabric OS v9.0.1a and v8.2.3a fails to properly process a malformed authentication header from the client, resulting in reading memory addresses outside the intended range. An unauthenticated attacker could discover a request, which could bypass the authentication process.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Brocade Fabric OS | Versions not published |
References
- www.broadcom.com www.broadcom.com
- security.netapp.com security.netapp.com
Timeline
- Published
- Last modified
Other CVEs of Brocade Fabric OS
The 33 CVEs of Brocade Fabric OS →
CVE-2022-33186
A vulnerability in Brocade Fabric OS software v9.1.1, v9.0.1e, v8.2.3c, v7.4.2j, and earlier versions could allow a…
9.8
Critical
CVE-2022-33180
A vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5 could allow a…
5.5
Medium
CVE-2022-28170
Brocade Fabric OS Web Application services before Brocade Fabric v9.1.0, v9.0.1e, v8.2.3c, v7.4.2j store server and user…
6.5
Medium
CVE-2022-33181
An information disclosure vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c,…
5.5
Medium