CVE-2018-6447: XSS
Published Sep 25, 2020
·Updated
A Reflective XSS Vulnerability in HTTP Management Interface in Brocade Fabric OS versions before Brocade Fabric OS v9.0.0, v8.2.2c, v8.2.1e, v8.1.2k, v8.2.0CBN3, v7.4.2g could allow authenticated attackers with access to the web interface to hijack a user’s session and take over the account.
Affected Software
55 affected components
Broadcom Fabric Operating System=2.1.2
Broadcom Fabric Operating System=2.2
Broadcom Fabric Operating System=3.1
Broadcom Fabric Operating System=5.0.5b
Broadcom Fabric Operating System=5.2.0
Broadcom Fabric Operating System=5.2.0a
Broadcom Fabric Operating System=7.4.0
Broadcom Fabric Operating System=7.4.1
Broadcom Fabric Operating System=7.4.1a
Broadcom Fabric Operating System=7.4.1b
Broadcom Fabric Operating System=7.4.1c
Broadcom Fabric Operating System=7.4.1d
Broadcom Fabric Operating System=7.4.1e
Broadcom Fabric Operating System=7.4.2
Broadcom Fabric Operating System=7.4.2a
Broadcom Fabric Operating System=7.4.2b
Broadcom Fabric Operating System=7.4.2c
Broadcom Fabric Operating System=7.4.2d
Broadcom Fabric Operating System=7.4.2f
Broadcom Fabric Operating System=8.0.0
Broadcom Fabric Operating System=8.0.1
Broadcom Fabric Operating System=8.0.1a
Broadcom Fabric Operating System=8.0.1b
Broadcom Fabric Operating System=8.0.2
Broadcom Fabric Operating System=8.0.2a
Broadcom Fabric Operating System=8.0.2b
Broadcom Fabric Operating System=8.0.2c
Broadcom Fabric Operating System=8.0.2d
Broadcom Fabric Operating System=8.0.2f
Broadcom Fabric Operating System=8.1.0
Broadcom Fabric Operating System=8.1.0a
Broadcom Fabric Operating System=8.1.0b
Broadcom Fabric Operating System=8.1.0c
Broadcom Fabric Operating System=8.1.1
Broadcom Fabric Operating System=8.1.1a
Broadcom Fabric Operating System=8.1.2
Broadcom Fabric Operating System=8.1.2a
Broadcom Fabric Operating System=8.1.2b
Broadcom Fabric Operating System=8.1.2c
Broadcom Fabric Operating System=8.1.2d
Broadcom Fabric Operating System=8.1.2e
Broadcom Fabric Operating System=8.1.2f
Broadcom Fabric Operating System=8.1.2j
Broadcom Fabric Operating System=8.2.0
Broadcom Fabric Operating System=8.2.0a
Broadcom Fabric Operating System=8.2.1
Broadcom Fabric Operating System=8.2.1a
Broadcom Fabric Operating System=8.2.1b
Broadcom Fabric Operating System=8.2.1c
Broadcom Fabric Operating System=8.2.1d
Broadcom Fabric Operating System=8.2.2
Broadcom Fabric Operating System=8.2.2a
Broadcom Fabric Operating System=8.2.2a1
Broadcom Fabric Operating System=8.2.2b
Broadcom Fabric Operating System=8.2.3
Event History
Sep 25, 2020
CVE Published
via MITRE·01:06 PM
Data Sourced
via MITRE·01:06 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-6447?
CVE-2018-6447 is classified as a medium severity vulnerability allowing session hijacking for authenticated users.
2
How do I fix CVE-2018-6447?
To mitigate CVE-2018-6447, upgrade your Brocade Fabric OS to version 9.0.0 or later.
3
Who is affected by CVE-2018-6447?
CVE-2018-6447 affects users of Brocade Fabric OS versions prior to 8.2.2.
4
What type of vulnerability is CVE-2018-6447?
CVE-2018-6447 is a Reflective Cross-Site Scripting (XSS) vulnerability.
5
Can CVE-2018-6447 be exploited remotely?
No, CVE-2018-6447 requires authenticated access to the web interface to exploit.