Vulnerability Details CVE-2016-8207
A Directory Traversal vulnerability in CliMonitorReportServlet in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to read arbitrary files including files with sensitive user information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.051
EPSS Ranking 89.4%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- http://www.securityfocus.com/bid/95691
- http://www.zerodayinitiative.com/advisories/ZDI-17-052
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03785en_us
- https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-180
- http://www.securityfocus.com/bid/95691
- http://www.zerodayinitiative.com/advisories/ZDI-17-052
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03785en_us
- https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-180
Products affected by CVE-2016-8207
-
cpe:2.3:a:brocade:network_advisor:11.0.0.0
-
cpe:2.3:a:brocade:network_advisor:11.0.2.0