Vulnerability · Published Mar 18, 2022 · Assigned by brocade

CVE-2021-27789

Medium 6.5

In plain English

A medium-severity security flaw in Brocade Fabric OS. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 57% of all known vulnerabilities).

Severity (CVSS NVD)6.5Medium
Exploit odds (30 days)0.8%top 42.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

The Web application of Brocade Fabric OS before versions Brocade Fabric OS v9.0.1a and v8.2.3a contains debug statements that expose sensitive information to the program's standard output device. An attacker who has compromised the FOS system may utilize this weakness to capture sensitive information, such as user credentials.

Affected products (as reported)

VendorProductVersions
n/a Brocade Fabric OS Brocade Fabric OS before Brocade Fabric OS v9.0.1a, v8.2.3, v8.2.0_CBN4, and v7.4.2h

References