Lucene search
BrocadeCVELIST:CVE-2023-31424HistoryAug 31, 2023 - 12:54 a.m.
CVE-2023-31424 Web authentication and authorization bypass
2023-08-3100:54:27
CWE-290
brocade
www.cve.org
1
cve-2023-31424
brocade sannav
web authentication
authorization bypass
remote unauthenticated users
web interface
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.9
Confidence
High
EPSS
0.004
Percentile
72.7%
Brocade SANnav Web interface before Brocade SANnav v2.3.0 and v2.2.2a
allows remote unauthenticated users to bypass web authentication and
authorization.
CNA Affected
[
{
"defaultStatus": "affected",
"product": "SANnav",
"vendor": "Brocade",
"versions": [
{
"status": "affected",
"version": "Brocade SANnav before Brocade SANnav v2.3.0 and v2.2.2a"
}
]
}
]Related
broadcom
broadcom
CVE-2023-31424 - Web authentication and authorization bypass
2023-08-29 00:00:00
prion
prion
Authorization
2023-08-31 01:15:00
nvd
nvd
CVE-2023-31424
2023-08-31 01:15:08
cve
cve
CVE-2023-31424
2023-08-31 01:15:08
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.9
Confidence
High
EPSS
0.004
Percentile
72.7%
Related for CVELIST:CVE-2023-31424