CVE-2018-6447

A Reflective XSS Vulnerability in HTTP Management Interface in Brocade Fabric OS versions before Brocade Fabric OS v9.0.0, v8.2.2c, v8.2.1e, v8.1.2k, v8.2.0_CBN3, v7.4.2g could allow authenticated attackers with access to the web interface to hijack a user’s session and take over the account.

Score

CVSS 3.1 5.4 Medium

Status

Modified - sirt@brocade.com

Published

2020-09-25

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Fabric Operating System (Broadcom)

References

• https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2020-1073