CVE-2023-5973

Brocade Web Interface in Brocade Fabric OS v9.x and before v9.2.0 does not properly represent the portName to the user if the portName contains reserved characters. This could allow an authenticated user to alter the UI of the Brocade Switch and change ports display.

Score

CVSS 3.1 4.3 Medium

Status

Modified - sirt@brocade.com

Published

2024-04-05

Last modified

2025-02-13

Weaknesses

CWE-346

Affected products

• Fabric Operating System (Broadcom)
• Fabric Os (Brocade)

References

• https://security.netapp.com/advisory/ntap-20240628-0005/
• https://support.broadcom.com/external/content/SecurityAdvisories/0/23214