QwikSec

Security Database

CVE

CWE

Training

CVE-2018-6445

Published: Jan 22, 2019

Modified: Aug 5, 2024

PUBLISHED

Description

A Vulnerability in Brocade Network Advisor versions before 14.0.3 could allow a remote unauthenticated attacker to export the current user database which includes the encrypted (not hashed) password of the systems. The attacker could gain access to the Brocade Network Advisor System after extracting/decrypting the passwords.

Vendor	Product	Versions
Brocade Communications Systems, Inc.	Brocade Network Advisor	affected `All versions prior to version 14.0.3`

References

https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-745

x_refsource_CONFIRM

https://security.netapp.com/advisory/ntap-20190411-0005/

x_refsource_CONFIRM

https://support.lenovo.com/us/en/product_security/LEN-25655

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.