Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-27791

The function that is used to parse the Authentication header in Brocade Fabric OS Web application service before Brocade Fabric OS v9.0.1a and v8.2.3a fails to properly process a m

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
brocade

Description

The function that is used to parse the Authentication header in Brocade Fabric OS Web application service before Brocade Fabric OS v9.0.1a and v8.2.3a fails to properly process a malformed authentication header from the client, resulting in reading memory addresses outside the intended range. An unauthenticated attacker could discover a request, which could bypass the authentication process.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a Brocade Fabric OS

  • Brocade Fabric OS before Brocade Fabric OS v9.0.1a and v8.2.3aaffected

References