CVE-2018-6445

2019-01-2217:00:00

brocade

www.cve.org

EPSS

0.003

Percentile

68.9%

JSON

A Vulnerability in Brocade Network Advisor versions before 14.0.3 could allow a remote unauthenticated attacker to export the current user database which includes the encrypted (not hashed) password of the systems. The attacker could gain access to the Brocade Network Advisor System after extracting/decrypting the passwords.

CNA Affected

[
  {
    "product": "Brocade Network Advisor",
    "vendor": "Brocade Communications Systems, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to version 14.0.3"
      }
    ]
  }
]