BSA-2021-1485

Brocade Fabric OS

2 more products

21345

10 May 2021

10 May 2021

Closed

Medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - 5.3

N/A

CVE-2020-15384

Summary

Security Advisory ID : BSA-2021-1485

Component : Login Response Header

Revision : 1.0

Brocade SANNav before version 2.1.1 contains an information disclosure vulnerability. Successful exploitation of internal server information in the initial login response header. 

Affected Products

Brocade SANnav versions before SANnav 2.1.1

Products Confirmed Not Vulnerable

No other Brocade Fibre Channel Products from Broadcom products are currently known to be affected by this vulnerability.

Solution

A security update has been provided in Brocade SANnav 2.1.1 and higher releases. 

Workaround

Credit

This issue was discovered through security testing.

Revision History

Version Change Date
1.0 Initial Publication May 10, 2021