PT-2020-14399

CVE-2020-15372

·

Published

2020-09-25

·

Updated

2021-06-22

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions prior to 7.4.2g Brocade Fabric OS versions prior to 8.1.2k Brocade Fabric OS versions prior to 8.2.0 CBN3 Brocade Fabric OS versions prior to 8.2.1e Brocade Fabric OS versions prior to 8.2.2a1 Brocade Fabric OS versions prior to 8.2.2c Brocade Fabric OS version 9.0.0
Description A vulnerability in the command-line interface could allow a local authenticated attacker to modify shell variables, potentially leading to an escalation of privileges or bypassing the logging.
Recommendations For Brocade Fabric OS versions prior to 7.4.2g, update to version 7.4.2g or later. For Brocade Fabric OS versions prior to 8.1.2k, update to version 8.1.2k or later. For Brocade Fabric OS versions prior to 8.2.0 CBN3, update to version 8.2.0 CBN3 or later. For Brocade Fabric OS versions prior to 8.2.1e, update to version 8.2.1e or later. For Brocade Fabric OS versions prior to 8.2.2a1, update to version 8.2.2a1 or later. For Brocade Fabric OS versions prior to 8.2.2c, update to version 8.2.2c or later. For Brocade Fabric OS version 9.0.0, update to a later version.
Exploitability
Fix
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾