PT-2020-14399
CVE-2020-15372
·
Published
2020-09-25
·
Updated
2021-06-22
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Brocade Fabric OS versions prior to 7.4.2g
Brocade Fabric OS versions prior to 8.1.2k
Brocade Fabric OS versions prior to 8.2.0 CBN3
Brocade Fabric OS versions prior to 8.2.1e
Brocade Fabric OS versions prior to 8.2.2a1
Brocade Fabric OS versions prior to 8.2.2c
Brocade Fabric OS version 9.0.0
Description
A vulnerability in the command-line interface could allow a local authenticated attacker to modify shell variables, potentially leading to an escalation of privileges or bypassing the logging.
Recommendations
For Brocade Fabric OS versions prior to 7.4.2g, update to version 7.4.2g or later.
For Brocade Fabric OS versions prior to 8.1.2k, update to version 8.1.2k or later.
For Brocade Fabric OS versions prior to 8.2.0 CBN3, update to version 8.2.0 CBN3 or later.
For Brocade Fabric OS versions prior to 8.2.1e, update to version 8.2.1e or later.
For Brocade Fabric OS versions prior to 8.2.2a1, update to version 8.2.2a1 or later.
For Brocade Fabric OS versions prior to 8.2.2c, update to version 8.2.2c or later.
For Brocade Fabric OS version 9.0.0, update to a later version.
Found an issue in the description? Have something to add? Feel free to write us 👾