CVE-2020-15374 — Improper Input Validation in Fabric OS

CWE-20 — Improper Input Validation3 documents3 sources
Severity
9.8CRITICALNVD
EPSS
0.5%
top 33.83%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Brocade Fabric OSBroadcom Fabric Operating System
Timeline
PublishedSep 25
Latest updateMay 24

Description

Rest API in Brocade Fabric OS v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c is vulnerable to multiple instances of reflected input.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5brocade/brocade_fabric_osBrocade Fabric OS versions v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c

🔴Vulnerability Details

2
GHSA
GHSA-h623-hg85-6ph3: Rest API in Brocade Fabric OS v8↗2022-05-24
▶
CVEList
CVE-2020-15374: Rest API in Brocade Fabric OS v8↗2020-09-25
▶
CVE-2020-15374 — Improper Input Validation in Fabric OS | cvebase