CVE-2018-6433

A vulnerability in the secryptocfg export command of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to bypass the export file access restrictions and initiate a file copy from the source to a remote system.

Score

CVSS 3.0 5.5 Medium

Status

Modified - sirt@brocade.com

Published

2018-11-08

Last modified

2024-08-05

Weaknesses

CWE-20

Affected products

• Fabric Operating System (Broadcom)
• Brocade Fabric Os (Brocade Communications Systems Inc.)

References

• https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-728