QwikSec

Security Database

CVE

CWE

Training

CVE-2018-6443

Published: Jan 22, 2019

Modified: Aug 5, 2024

PUBLISHED

Description

A vulnerability in Brocade Network Advisor Versions before 14.3.1 could allow an unauthenticated, remote attacker to log in to the JBoss Administration interface of an affected system using an undocumented user credentials and install additional JEE applications. A remote unauthenticated user who has access to Network Advisor client libraries and able to decrypt the Jboss credentials could gain access to the Jboss web console.

Vendor	Product	Versions
Brocade Communications Systems, Inc.	Brocade Network Advisor	affected `All versions prior to version 14.3.1`

References

https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-743

x_refsource_CONFIRM

https://security.netapp.com/advisory/ntap-20190411-0005/

x_refsource_CONFIRM

http://packetstormsecurity.com/files/153035/Brocade-Network-Advisor-14.4.1-Unauthenticated-Remote-Code-Execution.html

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.