First published: Thu Nov 08 2018(Updated: )
A vulnerability in Secure Shell implementation of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to provide arbitrary environment variables, and bypass the restricted configuration shell.
Credit: sirt@brocade.com
Affected Software | Affected Version | How to fix |
---|---|---|
Broadcom Fabric Operating System | >=7.4.2<7.4.2d | |
Broadcom Fabric Operating System | >=8.0.2<8.0.2f | |
Broadcom Fabric Operating System | >=8.1.2<8.1.2f | |
Broadcom Fabric Operating System | >=8.2.0<8.2.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2018-6441 is considered a high severity vulnerability due to its potential exploitation by local attackers.
To fix CVE-2018-6441, upgrade your Brocade Fabric OS to version 8.2.1 or later, 8.1.2f, 8.0.2f, or 7.4.2d.
CVE-2018-6441 affects Brocade Fabric OS versions prior to 8.2.1, 8.1.2f, 8.0.2f, and 7.4.2d.
CVE-2018-6441 cannot be exploited remotely as it requires local access to the system.
CVE-2018-6441 could allow an attacker to manipulate environment variables and bypass the restricted configuration shell.