deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-39349
Published: 2022-10-25
Description: The Tasks.org Android app is an open-source app for to-do lists and reminders. The Tasks.org app uses the activity `ShareLinkActivity.kt` to handle "share" intents coming from other components in the same device and convert them to tasks. Those intents may contain arbitrary file paths as attachments, in which case the files pointed by those paths are copied in the app's external storage directory. Prior to versions 12.7.1 and 13.0.1, those paths were not validated, allowing a malicious or compromised application in the same device to force Tasks.org to copy files from its internal storage to its external storage directory, where they became accessible to any component with permission to read the external storage. This vulnerability can lead to sensitive information disclosure. All information in the user's notes and the app's preferences, including the encrypted credentials of CalDav integrations if enabled, could be accessed by third party applications installed on the same device. This issue was fixed in versions 12.7.1 and 13.0.1. There are no known workarounds.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-441, CWE-668, CWE-668
References: https://github.com/tasks/tasks/commit/23bf69d3f44b07e4bc62ea107f72103239f5d942; https://github.com/tasks/tasks/security/advisories/GHSA-8x58-cg74-8jg8; https://github.com/tasks/tasks/commit/23bf69d3f44b07e4bc62ea107f72103239f5d942
CVE: CVE-2022-39350
Published: 2022-10-25
Description: @dependencytrack/frontend is a Single Page Application (SPA) used in Dependency-Track, an open source Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain. Due to the common practice of providing vulnerability details in markdown format, the Dependency-Track frontend renders them using the JavaScript library Showdown. Showdown does not have any XSS countermeasures built in, and versions before 4.6.1 of the Dependency-Track frontend did not encode or sanitize Showdown's output. This made it possible for arbitrary JavaScript included in vulnerability details via HTML attributes to be executed in context of the frontend. Actors with the `VULNERABILITY_MANAGEMENT` permission can exploit this weakness by creating or editing a custom vulnerability and providing XSS payloads in any of the following fields: Description, Details, Recommendation, or References. The payload will be executed for users with the `VIEW_PORTFOLIO` permission when browsing to the modified vulnerability's page. Alternatively, malicious JavaScript could be introduced via any of the vulnerability databases mirrored by Dependency-Track. However, this attack vector is highly unlikely, and the maintainers of Dependency-Track are not aware of any occurrence of this happening. Note that the `Vulnerability Details` element of the `Audit Vulnerabilities` tab in the project view is not affected. The issue has been fixed in frontend version 4.6.1.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://docs.dependencytrack.org/changelog/; https://github.com/DependencyTrack/frontend/security/advisories/GHSA-c33w-pm52-mqvf; https://github.com/showdownjs/showdown/wiki/Markdown%27s-XSS-Vulnerability-%28and-how-to-mitigate-it%29
CVE: CVE-2022-39351
Published: 2022-10-25
Description: Dependency-Track is a Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain. Prior to version 4.6.0, performing an API request using a valid API key with insufficient permissions causes the API key to be written to Dependency-Track's audit log in clear text. Actors with access to the audit log can exploit this flaw to gain access to valid API keys. The issue has been fixed in Dependency-Track 4.6.0. Instead of logging the entire API key, only the last 4 characters of the key will be logged. It is strongly recommended to check historic logs for occurrences of this behavior, and re-generating API keys in case of leakage.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-312, CWE-312
References: https://docs.dependencytrack.org/changelog/; https://github.com/DependencyTrack/dependency-track/blob/4.5.0/src/main/docker/logback.xml; https://github.com/DependencyTrack/dependency-track/security/advisories/GHSA-gh7v-4hxp-gqp4
CVE: CVE-2022-39836
Published: 2022-10-25
Description: An issue was discovered in Connected Vehicle Systems Alliance (COVESA) dlt-daemon through 2.18.8. Due to a faulty DLT file parser, a crafted DLT file that crashes the process can be created. This is due to missing validation checks. There is a heap-based buffer over-read of one byte.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://lists.debian.org/debian-lts-announce/2024/06/msg00021.html; https://sec-consult.com/vulnerability-lab/advisory/multiple-memory-corruption-vulnerabilities-in-covesa-dlt-daemon/; https://seclists.org/fulldisclosure/2022/Sep/24
CVE: CVE-2022-39837
Published: 2022-10-25
Description: An issue was discovered in Connected Vehicle Systems Alliance (COVESA) dlt-daemon through 2.18.8. Due to a faulty DLT file parser, a crafted DLT file that crashes the process can be created. This is due to missing validation checks. There is a NULL pointer dereference,
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://lists.debian.org/debian-lts-announce/2024/06/msg00021.html; https://sec-consult.com/vulnerability-lab/advisory/multiple-memory-corruption-vulnerabilities-in-covesa-dlt-daemon/; https://seclists.org/fulldisclosure/2022/Sep/24
CVE: CVE-2022-3097
Published: 2022-10-25
Description: The Plugin LBstopattack WordPress plugin before 1.1.3 does not use nonces when saving its settings, making it possible for attackers to conduct CSRF attacks. This could allow attackers to disable the plugin's protections.
CVSS Score: 6.5 (MEDIUM)
References: https://wpscan.com/vulnerability/9ebb8318-ebaf-4de7-b337-c91327685a43; https://wpscan.com/vulnerability/9ebb8318-ebaf-4de7-b337-c91327685a43
CVE: CVE-2022-3246
Published: 2022-10-25
Description: The Blog2Social: Social Media Auto Post & Scheduler WordPress plugin before 6.9.10 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by any authenticated users, such as subscribers
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://wpscan.com/vulnerability/ece049b2-9a21-463d-9e8b-b4ce61919f0c; https://wpscan.com/vulnerability/ece049b2-9a21-463d-9e8b-b4ce61919f0c
CVE: CVE-2022-3247
Published: 2022-10-25
Description: The Blog2Social: Social Media Auto Post & Scheduler WordPress plugin before 6.9.10 does not have authorisation in an AJAX action, and does not ensure that the URL to make a request to is an external one. As a result, any authenticated users, such as subscriber could perform SSRF attacks
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: https://wpscan.com/vulnerability/ee312f22-ca58-451d-a1cb-3f78a6e5ecaf; https://wpscan.com/vulnerability/ee312f22-ca58-451d-a1cb-3f78a6e5ecaf
CVE: CVE-2022-3300
Published: 2022-10-25
Description: The Form Maker by 10Web WordPress plugin before 1.15.6 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://wpscan.com/vulnerability/ddc9ed69-d942-4fad-bbf4-1be3b86460d9; https://wpscan.com/vulnerability/ddc9ed69-d942-4fad-bbf4-1be3b86460d9
CVE: CVE-2022-3302
Published: 2022-10-25
Description: The Spam protection, AntiSpam, FireWall by CleanTalk WordPress plugin before 5.185.1 does not validate ids before using them in a SQL statement, which could lead to SQL injection exploitable by high privilege users such as admin
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://wpscan.com/vulnerability/1b5a018d-f2d4-4373-be1e-5162cc5c928b; https://wpscan.com/vulnerability/1b5a018d-f2d4-4373-be1e-5162cc5c928b
CVE: CVE-2022-3335
Published: 2022-10-25
Description: The Kadence WooCommerce Email Designer WordPress plugin before 1.5.7 unserialises the content of an imported file, which could lead to PHP object injections issues when an admin import (intentionally or not) a malicious file and a suitable gadget chain is present on the blog.
CVSS Score: 7.2 (HIGH)
CWE: CWE-502
References: https://wpscan.com/vulnerability/39514705-c887-4a02-a77b-36e1dcca8f5d; https://wpscan.com/vulnerability/39514705-c887-4a02-a77b-36e1dcca8f5d
CVE: CVE-2022-3344
Published: 2022-10-25
Description: A flaw was found in the KVM's AMD nested virtualization (SVM). A malicious L1 guest could purposely fail to intercept the shutdown of a cooperative nested guest (L2), possibly leading to a page fault and kernel panic in the host (L0).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-440
References: https://bugzilla.redhat.com/show_bug.cgi?id=2130278; https://lore.kernel.org/lkml/[PII_REDACTED]3055.224317-5-mlevitsk%40redhat.com/T/; https://bugzilla.redhat.com/show_bug.cgi?id=2130278
CVE: CVE-2022-3350
Published: 2022-10-25
Description: The Contact Bank WordPress plugin through 3.0.30 does not sanitise and escape some of its Form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/6d796b83-03c0-49f8-8d07-5c63ce8a32b9; https://wpscan.com/vulnerability/6d796b83-03c0-49f8-8d07-5c63ce8a32b9
CVE: CVE-2022-3391
Published: 2022-10-25
Description: The Retain Live Chat WordPress plugin through 0.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/ecc51420-ee50-4e39-a38d-09686f1996f2; https://wpscan.com/vulnerability/ecc51420-ee50-4e39-a38d-09686f1996f2
CVE: CVE-2022-3392
Published: 2022-10-25
Description: The WP Humans.txt WordPress plugin through 1.0.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/2296156e-b177-478e-a01c-b1ea4fee0aca; https://wpscan.com/vulnerability/2296156e-b177-478e-a01c-b1ea4fee0aca
CVE: CVE-2022-3393
Published: 2022-10-25
Description: The Post to CSV by BestWebSoft WordPress plugin through 1.4.0 does not properly escape fields when exporting data as CSV, leading to a CSV injection
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1236
References: https://wpscan.com/vulnerability/689b4c42-c516-4c57-8ec7-3a6f12a3594e; https://wpscan.com/vulnerability/689b4c42-c516-4c57-8ec7-3a6f12a3594e
CVE: CVE-2022-3394
Published: 2022-10-25
Description: The WP All Export Pro WordPress plugin before 1.7.9 does not limit some functionality during exports only to users with the Administrator role, allowing any logged in user which has been given privileges to perform exports to execute arbitrary code on the site. By default only administrators can run exports, but the privilege can be delegated to lower privileged users.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://wpscan.com/vulnerability/3266eb59-a8b2-4a5a-ab48-01a9af631b2c; https://wpscan.com/vulnerability/3266eb59-a8b2-4a5a-ab48-01a9af631b2c
CVE: CVE-2022-3395
Published: 2022-10-25
Description: The WP All Export Pro WordPress plugin before 1.7.9 uses the contents of the cc_sql POST parameter directly as a database query, allowing users which has been given permission to run exports to execute arbitrary SQL statements, leading to a SQL Injection vulnerability. By default only users with the Administrator role can perform exports, but this can be delegated to lower privileged users as well.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://wpscan.com/vulnerability/10742154-368a-40be-a67d-80ea848493a0; https://wpscan.com/vulnerability/10742154-368a-40be-a67d-80ea848493a0
CVE: CVE-2022-41704
Published: 2022-10-25
Description: A vulnerability in Batik of Apache XML Graphics allows an attacker to run untrusted Java code from an SVG. This issue affects Apache XML Graphics prior to 1.16. It is recommended to update to version 1.16.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918, CWE-918
References: http://www.openwall.com/lists/oss-security/2022/10/25/2; https://lists.apache.org/thread/hplhx0o74jb7blj39fm4kw3otcnjd6xf; https://lists.debian.org/debian-lts-announce/2022/10/msg00038.html
CVE: CVE-2022-42890
Published: 2022-10-25
Description: A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: http://www.openwall.com/lists/oss-security/2022/10/25/3; https://lists.apache.org/thread/pkvhy0nsj1h1mlon008wtzhosbtxjwly; https://lists.debian.org/debian-lts-announce/2022/10/msg00038.html
CVE: CVE-2022-36451
Published: 2022-10-25
Description: A vulnerability in the MiCollab Client server component of Mitel MiCollab through 9.5.0.101 could allow an authenticated attacker to conduct a Server-Side Request Forgery (SSRF) attack due to insufficient restriction of URL parameters. A successful exploit could allow an attacker to leverage connections and permissions available to the host server.
CVSS Score: 8.8 (HIGH)
CWE: CWE-918, CWE-918
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0006; https://www.mitel.com/support/security-advisories
CVE: CVE-2022-36453
Published: 2022-10-25
Description: A vulnerability in the MiCollab Client API of Mitel MiCollab 9.1.3 through 9.5.0.101 could allow an authenticated attacker to modify their profile parameters due to improper authorization controls. A successful exploit could allow the authenticated attacker to control another extension number.
CVSS Score: 8.8 (HIGH)
CWE: CWE-285
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0006; https://www.mitel.com/support/security-advisories
CVE: CVE-2022-36454
Published: 2022-10-25
Description: A vulnerability in the MiCollab Client API of Mitel MiCollab through 9.5.0.101 could allow an authenticated attacker to modify their profile parameters due to improper authorization controls. A successful exploit could allow the authenticated attacker to impersonate another user's name.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-285
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0006; https://www.mitel.com/support/security-advisories
CVE: CVE-2022-3644
Published: 2022-10-25
Description: The collection remote for pulp_ansible stores tokens in plaintext instead of using pulp's encrypted field and exposes them in read/write mode via the API () instead of marking it as write only.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-256, CWE-522
References: https://github.com/pulp/pulp_ansible/blob/main/pulp_ansible/app/models.py#L234; https://github.com/pulp/pulp_ansible/blob/main/pulp_ansible/app/models.py#L234
CVE: CVE-2022-27912
Published: 2022-10-25
Description: An issue was discovered in Joomla! 4.0.0 through 4.2.3. Sites with publicly enabled debug mode exposed data of previous requests.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://developer.joomla.org/security-centre/[PII_REDACTED]1-core-disclosure-of-critical-information-in-debug-mode.html; https://developer.joomla.org/security-centre/[PII_REDACTED]1-core-disclosure-of-critical-information-in-debug-mode.html
CVE: CVE-2022-27913
Published: 2022-10-25
Description: An issue was discovered in Joomla! 4.2.0 through 4.2.3. Inadequate filtering of potentially malicious user input leads to reflected XSS vulnerabilities in various components.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://developer.joomla.org/security-centre/[PII_REDACTED]2-core-reflected-xss-in-various-components.html; https://developer.joomla.org/security-centre/[PII_REDACTED]2-core-reflected-xss-in-various-components.html
CVE: CVE-2022-31468
Published: 2022-10-25
Description: OX App Suite through 8.2 allows XSS via an attachment or OX Drive content when a client uses the len or off parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://packetstormsecurity.com/files/168242/OX-App-Suite-Cross-Site-Scripting-Command-Injection.html; https://packetstormsecurity.com/files/168242/OX-App-Suite-Cross-Site-Scripting-Command-Injection.html
CVE: CVE-2022-36452
Published: 2022-10-25
Description: A vulnerability in the web conferencing component of Mitel MiCollab through 9.5.0.101 could allow an unauthenticated attacker to upload malicious files. A successful exploit could allow an attacker to execute arbitrary code within the context of the application.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0006; https://www.mitel.com/support/security-advisories
CVE: CVE-2022-38162
Published: 2022-10-25
Description: Reflected cross-site scripting (XSS) vulnerabilities in WithSecure through 2022-08-10) exists within the F-Secure Policy Manager due to an unvalidated parameter in the endpoint, which allows remote attackers to provide a malicious input.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://withsecure.com; https://www.withsecure.com/en/support/security-advisories; https://www.withsecure.com/en/support/security-advisories/cve-2022-38162?_gl=1%2Adtq2t3%2A_up%2AMQ..%2A_ga%2AMTMxOTM1OTA2MC4xNjY2NzIxMjQ0%2A_ga_B5SG5Y2DHS%2AMTY2NjcyMTI0MS4xLjAuMTY2NjcyMTI0MS4wLjAuMA..
CVE: CVE-2022-38181
Published: 2022-10-25
Description: The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishandled. This affects Bifrost r0p0 through r38p1, and r39p0; Valhall r19p0 through r38p1, and r39p0; and Midgard r4p0 through r32p0.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: http://packetstormsecurity.com/files/172854/Android-Arm-Mali-GPU-Arbitrary-Code-Execution.html; https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities; https://developer.arm.com/support/arm-security-updates
CVE: CVE-2022-39354
Published: 2022-10-25
Description: SputnikVM, also called evm, is a Rust implementation of Ethereum Virtual Machine. A custom stateful precompile can use the `is_static` parameter to determine if the call is executed in a static context (via `STATICCALL`), and thus decide if stateful operations should be done. Prior to version 0.36.0, the passed `is_static` parameter was incorrect -- it was only set to `true` if the call came from a direct `STATICCALL` opcode. However, once a static call context is entered, it should stay static. The issue only impacts custom precompiles that actually uses `is_static`. For those affected, the issue can lead to possible incorrect state transitions. Version 0.36.0 contains a patch. There are no known workarounds.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-670, CWE-670
References: https://github.com/rust-blockchain/evm/pull/133; https://github.com/rust-blockchain/evm/security/advisories/GHSA-hhc4-47rh-cr34; https://github.com/rust-blockchain/evm/pull/133
CVE: CVE-2022-28169
Published: 2022-10-25
Description: Brocade Webtools in Brocade Fabric OS versions before Brocade Fabric OS versions v9.1.1, v9.0.1e, and v8.2.3c could allow a low privilege webtools, user, to gain elevated admin rights, or privileges, beyond what is intended or entitled for that user. By exploiting this vulnerability, a user whose role is not an admin can create a new user with an admin role using the operator session id. The issue was replicated after intercepting the admin, and operator authorization headers sent unencrypted and editing a user addition request to use the operator's authorization header.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269, CWE-269
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2075; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-28170
Published: 2022-10-25
Description: Brocade Fabric OS Web Application services before Brocade Fabric v9.1.0, v9.0.1e, v8.2.3c, v7.4.2j store server and user passwords in the debug statements. This could allow a local user to extract the passwords from a debug file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-922, CWE-922
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2076; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-33178
Published: 2022-10-25
Description: A vulnerability in the radius authentication system of Brocade Fabric OS before Brocade Fabric OS 9.0 could allow a remote attacker to execute arbitrary code on the Brocade switch.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20, CWE-20
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2077; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-33179
Published: 2022-10-25
Description: A vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, and 7.4.2j could allow a local authenticated user to break out of restricted shells with “set context” and escalate privileges.
CVSS Score: 8.8 (HIGH)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2079; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-33180
Published: 2022-10-25
Description: A vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5 could allow a local authenticated attacker to export out sensitive files with “seccryptocfg”, “configupload”.
CVSS Score: 5.5 (MEDIUM)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2079; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-33181
Published: 2022-10-25
Description: An information disclosure vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5, 7.4.2.j could allow a local authenticated attacker to read sensitive files using switch commands “configshow” and “supportlink”.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2083; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-33182
Published: 2022-10-25
Description: A privilege escalation vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5, could allow a local authenticated user to escalate its privilege to root using switch commands “supportlink”, “firmwaredownload”, “portcfgupload, license, and “fosexec”.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2084; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/