CVE-2023-31432: Privilege issues in multiple commands
Through manipulation of passwords or other variables, using commands such as portcfgupload, configupload, license, myid, a non-privileged user could obtain root privileges in Brocade Fabric OS versions before Brocade Fabric OS v9.1.1c and v9.2.0.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-31432?
The severity of CVE-2023-31432 is high with a score of 7.8.
Which versions of Brocade Fabric OS are affected by CVE-2023-31432?
Brocade Fabric OS versions before v9.1.1c and v9.2.0 are affected by CVE-2023-31432.
How can a non-privileged user obtain root privileges in Brocade Fabric OS?
A non-privileged user can obtain root privileges in Brocade Fabric OS by manipulating passwords or other variables using commands such as portcfgupload, configupload, license, myid.
How can I fix CVE-2023-31432?
To fix CVE-2023-31432, upgrade to Brocade Fabric OS v9.1.1c or v9.2.0 or a higher version.
Where can I find more information about CVE-2023-31432?
You can find more information about CVE-2023-31432 at the following references: https://support.broadcom.com/external/content/SecurityAdvisories/0/22385, https://security.netapp.com/advisory/ntap-20230908-0007/