Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2023-31425

Privilege escalation via the fosexec command

Description

A vulnerability in the fosexec command of Brocade Fabric OS after Brocade Fabric OS v9.1.0 and, before Brocade Fabric OS v9.1.1 could allow a local authenticated user to perform privilege escalation to root by breaking the rbash shell. Starting with Fabric OS v9.1.0, “root” account access is disabled.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Brocade Fabric OS

Default version status: unaffected

  • after Brocade Fabric OS v9.1.0 and, before Brocade Fabric OS v9.1.1affected

References