Non notée
CVE-2021-27791 The function that is used to parse the Authentication header in Brocade Fabric OS Web application service before Brocade…
Description
The function that is used to parse the Authentication header in Brocade Fabric OS Web application service before Brocade Fabric OS v9.0.1a and v8.2.3a fails to properly process a malformed authentication header from the client, resulting in reading memory addresses outside the intended range. An unauthenticated attacker could discover a request, which could bypass the authentication process.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Brocade Fabric OS | Versions non publiées |
Références
- www.broadcom.com www.broadcom.com
- security.netapp.com security.netapp.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Brocade Fabric OS
Les 33 CVE de Brocade Fabric OS →
CVE-2022-33186
A vulnerability in Brocade Fabric OS software v9.1.1, v9.0.1e, v8.2.3c, v7.4.2j, and earlier versions could allow a…
9.8
Critique
CVE-2022-33180
A vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5 could allow a…
5.5
Moyenne
CVE-2022-28170
Brocade Fabric OS Web Application services before Brocade Fabric v9.1.0, v9.0.1e, v8.2.3c, v7.4.2j store server and user…
6.5
Moyenne
CVE-2022-33181
An information disclosure vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c,…
5.5
Moyenne