VulnerabilityModified
CVE-2016-8207
A Directory Traversal vulnerability in CliMonitorReportServlet in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to read arbitrary files including files with sensitive user information.
HIGH 7.5EPSS 15.4%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 15.4%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.
Description
A Directory Traversal vulnerability in CliMonitorReportServlet in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to read arbitrary files including files with sensitive user information.
- CVSS 3.0
- 7.5 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 15.38% probability · 97th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- brocade/network advisor
- Source
- sirt@brocade.com
References
- http://www.securityfocus.com/bid/95691Third Party Advisory, VDB Entry
- http://www.zerodayinitiative.com/advisories/ZDI-17-052
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03785en_us
- https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-180
- http://www.securityfocus.com/bid/95691Third Party Advisory, VDB Entry
- http://www.zerodayinitiative.com/advisories/ZDI-17-052
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03785en_us
- https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-180
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.