Skip to main content

Brocade Fabric Operating System CVE-2023-31926

HIGH
Improper Preservation of Permissions (CWE-281)
2023-08-02 sirt@brocade.com
Information Disclosure Brocade Fabric Operating System
7.1
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.1 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Aug 02, 2023 - 01:15 nvd
HIGH 7.1

DescriptionNVD

System files could be overwritten using the less command in Brocade Fabric OS before Brocade Fabric OS v9.1.1c and v9.2.0.

AnalysisAI

System files could be overwritten using the less command in Brocade Fabric OS before Brocade Fabric OS v9.1.1c and v9.2.0. Rated high severity (CVSS 7.1), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-281. System files could be overwritten using the less command in Brocade Fabric OS before Brocade Fabric OS v9.1.1c and v9.2.0. Affected products include: Broadcom Brocade Fabric Operating System.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Brocade Fabric Operating System

View all
CVE-2020-12243 HIGH POC
7.5 Apr 28

In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial
CVE-2021-23133 HIGH POC
7.0 Apr 22

A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege escalatio
CVE-2023-28531 CRITICAL
9.8 Mar 17

ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints. Rat
CVE-2024-6119 HIGH
7.5 Sep 03

Issue summary: Applications performing certificate name checks (e.g., TLS clients checking server certificates) may atte
CVE-2023-31432 HIGH
7.8 Aug 02

Through manipulation of passwords or other variables, using commands such as portcfgupload, configupload, license, myid,
CVE-2023-31928 MEDIUM
6.1 Aug 02

A reflected cross-site scripting (XSS) vulnerability exists in Brocade Webtools PortSetting.html of Brocade Fabric OS ve
CVE-2020-1927 MEDIUM
6.1 Apr 02

In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential m
CVE-2023-31431 MEDIUM
5.5 Aug 02

A buffer overflow vulnerability in “diagstatus” command in Brocade Fabric OS before Brocade Fabric v9.2.0 and v9.1.1c co
CVE-2023-31430 MEDIUM
5.5 Aug 02

A buffer overflow vulnerability in “secpolicydelete” command in Brocade Fabric OS before Brocade Fabric OS v9.1.1c and v
CVE-2023-31428 MEDIUM
5.5 Aug 02

Brocade Fabric OS before Brocade Fabric OS v9.1.1c, v9.2.0 contains a vulnerability in the command line that could allow
CVE-2023-31927 MEDIUM
5.3 Aug 02

An information disclosure in the web interface of Brocade Fabric OS versions before Brocade Fabric OS v9.2.0 and v9.1.1c

Same weakness CWE-281 – Improper Preservation of Permissions

View all
CVE-2017-8543 CRITICAL
9.8
CVE-2024-46310 CRITICAL POC
9.1
CVE-2017-8589 CRITICAL
9.8
CVE-2024-54879 CRITICAL POC
9.1
CVE-2024-41650 CRITICAL POC
9.8
CVE-2024-41649 CRITICAL POC
9.8
CVE-2024-41648 CRITICAL POC
9.8
CVE-2024-41646 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2023-31926 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy