Description
A Directory Traversal vulnerability in DashboardFileReceiveServlet in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to upload a malicious file in a section of the file system where it can be executed.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a Brocade Network Advisor versions released prior to and including 14.0.2
Brocade Network Advisor versions released prior to and including 14.0.2affected
References
- http://www.zerodayinitiative.com/advisories/ZDI-17-050 ↗
- https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-178 ↗
- http://www.securityfocus.com/bid/95694 ↗
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03785en_us ↗