First published: Thu Aug 12 2021(Updated: )
ntermittent authorization failure in aaa tacacs+ with Brocade Fabric OS versions before Brocade Fabric OS v9.0.1b and after 9.0.0, also in Brocade Fabric OS before Brocade Fabric OS v8.2.3a and after v8.2.0 could cause a user with a valid account to be unable to log into the switch.
Credit: sirt@brocade.com
Affected Software | Affected Version | How to fix |
---|---|---|
Broadcom Fabric Operating System | >=8.2.0<8.2.3 | |
Broadcom Fabric Operating System | >=9.0.0<9.0.1 | |
Broadcom Fabric Operating System | =8.2.3 | |
Broadcom Fabric Operating System | =9.0.1 | |
Broadcom Fabric Operating System | =9.0.1a |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-27793 is a vulnerability that causes intermittent authorization failure in aaa tacacs+ with Brocade Fabric OS versions before Brocade Fabric OS v9.0.1b and after 9.0.0, and also in Brocade Fabric OS before Brocade Fabric OS v8.2.3a and after v8.2.0, which could cause a user with a valid account to be unable to log into the switch.
The severity of CVE-2021-27793 is medium, with a severity value of 5.3.
Brocade Fabric OS versions before Brocade Fabric OS v9.0.1b and after 9.0.0, and also in Brocade Fabric OS before Brocade Fabric OS v8.2.3a and after v8.2.0 are affected by CVE-2021-27793.
To fix CVE-2021-27793, it is recommended to update to Brocade Fabric OS v9.0.1b or later, or Brocade Fabric OS v8.2.3a or later.
You can find more information about CVE-2021-27793 in the following references: [NetApp Security Advisory](https://security.netapp.com/advisory/ntap-20210819-0001/) and [Brocade Security Advisory](https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1553).