CVE-2023-31427: Path Traversal

Q: What is CVE-2023-31427?

CVE-2023-31427 is a vulnerability in Brocade Fabric OS versions before Brocade Fabric OS v9.1.1c and v9.2.0 that allows an authenticated, local user to execute any command regardless of assigned privilege.

Q: How severe is CVE-2023-31427?

CVE-2023-31427 has a severity rating of 7.8, which is considered high.

Q: How can I fix CVE-2023-31427?

To fix CVE-2023-31427, update Brocade Fabric OS to version 9.1.1c or later.

Q: Where can I find more information about CVE-2023-31427?

More information about CVE-2023-31427 can be found in the following references: [link1], [link2].

Published Aug 1, 2023

Updated

Brocade Fabric OS versions before Brocade Fabric OS v9.1.1c, and v9.2.0 Could allow an authenticated, local user with knowledge of full path names inside Brocade Fabric OS to execute any command regardless of assigned privilege. Starting with Fabric OS v9.1.0, “root” account access is disabled.

Affected Software

1 affected component

Broadcom Fabric Operating System<9.1.1c

Event History

Aug 1, 2023

CVE Published

11:15 PM

Data Sourced

11:15 PM

Description

Data Sourced

via NVD·11:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2023-31427?

CVE-2023-31427 is a vulnerability in Brocade Fabric OS versions before Brocade Fabric OS v9.1.1c and v9.2.0 that allows an authenticated, local user to execute any command regardless of assigned privilege.

How severe is CVE-2023-31427?

CVE-2023-31427 has a severity rating of 7.8, which is considered high.

Which software versions are affected by CVE-2023-31427?

Brocade Fabric OS versions before Brocade Fabric OS v9.1.1c and v9.2.0 are affected by CVE-2023-31427.

How can I fix CVE-2023-31427?

To fix CVE-2023-31427, update Brocade Fabric OS to version 9.1.1c or later.

Where can I find more information about CVE-2023-31427?