Not rated
CVE-2022-28165 A vulnerability in the role-based access control (RBAC) functionality of the Brocade SANNav before 2.2.0 could allow…
Description
A vulnerability in the role-based access control (RBAC) functionality of the Brocade SANNav before 2.2.0 could allow an authenticated, remote attacker to access resources that they should not be able to access and perform actions that they should not be able to perform. The vulnerability exists because restrictions are not performed on Server side to ensure the user has required permission before processing requests.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Brocade SANnav | Versions not published |
References
- www.broadcom.com www.broadcom.com
Timeline
- Published
- Last modified
Other CVEs of Brocade SANnav
The 18 CVEs of Brocade SANnav →
CVE-2022-28168
In Brocade SANnav before Brocade SANnav v2.2.0.2 and Brocade SANnav2.1.1.8, encoded scp-server passwords are stored…
Not rated
CVE-2022-28167
Brocade SANnav before Brocade SANvav v
Not rated
CVE-2022-28166
In Brocade SANnav version before SANN2.2.0.2 and Brocade SANNav before 2.1.1.8, the implementation of TLS/SSL Server…
Not rated
CVE-2022-28161
An information exposure through log file vulnerability in Brocade SANNav versions before Brocade SANnav 2.2.0 could…
Not rated