{"id":"CVE-2021-27798","state":"PUBLISHED","title":"privileged directory transversal.in Brocade Fabric OS versions 7.4.1.x and 7.3.x","description":"A vulnerability in Brocade Fabric OS versions 7.4.1b and 7.3.1d could allow local users to conduct privileged directory transversal. Brocade Fabric OS versions 7.4.1.x and 7.3.x have reached end of life. Brocade Fabric OS Users should upgrade to supported versions as described in the Product End-of-Life published report.","publishedAt":"2022-08-05T15:24:40.000Z","updatedAt":"2025-02-15T00:16:51.895Z","severity":null,"assigner":"brocade","products":["Brocade Brocade Fabric OS"],"affected":[{"vendor":"Brocade","product":"Brocade Fabric OS","defaultStatus":"unaffected","versions":[{"version":"Brocade Fabric OS 7.4.1b, and 7.3.1d.","status":"affected"}]}],"references":["https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2012"],"weaknesses":["CWE-22"],"ingestedAt":"2026-10-29T19:48:15.637Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2021/27xxx/CVE-2021-27798.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2021-27798","state":"PUBLISHED","datePublished":"2022-08-05T15:24:40.000Z","dateUpdated":"2025-02-15T00:16:51.895Z","assignerShortName":"brocade","assignerOrgId":"87b297d7-335e-4844-9551-11b97995a791","dateReserved":"2021-02-26T00:00:00.000Z"},"containers":{"cna":{"title":"privileged directory transversal.in Brocade Fabric OS versions 7.4.1.x and 7.3.x","descriptions":[{"lang":"en","value":"A vulnerability in Brocade Fabric OS versions 7.4.1b and 7.3.1d could allow local users to conduct privileged directory transversal. Brocade Fabric OS versions 7.4.1.x and 7.3.x have reached end of life. Brocade Fabric OS Users should upgrade to supported versions as described in the Product End-of-Life published report."}],"affected":[{"vendor":"Brocade","product":"Brocade Fabric OS","defaultStatus":"unaffected","versions":[{"version":"Brocade Fabric OS 7.4.1b, and 7.3.1d.","status":"affected"}]}],"references":[{"url":"https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2012","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-22","description":"CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"brocade","orgId":"87b297d7-335e-4844-9551-11b97995a791","dateUpdated":"2025-02-15T00:16:51.895Z"},"source":{"discovery":"UNKNOWN"},"tags":["unsupported-when-assigned"],"x_generator":{"engine":"Vulnogram 0.2.0"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"sirt@brocade.com","ID":"CVE-2021-27798","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Brocade Fabric OS","version":{"version_data":[{"version_value":"Brocade Fabric OS versions Brocade Fabric OS v7.4.1b, and v7.3.1d."}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"** UNSUPPORTED WHEN ASSIGNED ** A vulnerability in Brocade Fabric OS versions v7.4.1b and v7.3.1d could allow local users to conduct privileged directory transversal. Brocade Fabric OS versions v7.4.1.x and v7.3.x have reached end of life. Brocade Fabric OS Users should upgrade to supported versions as described in the Product End-of-Life Publish report."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Privileged Directory Traversal"}]}]},"references":{"reference_data":[{"name":"https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2012","refsource":"MISC","url":"https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2012"}]}}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-07-03T14:57:53.170051Z","id":"CVE-2021-27798","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-07-03T14:58:04.056Z"}},{"title":"CVE Program Container","references":[{"url":"https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2012","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T21:33:15.892Z"}}]}}}