{"id":"CVE-2023-5973","state":"PUBLISHED","title":"Truncated port name","description":"Brocade\n Web Interface in Brocade Fabric OS v9.x and before v9.2.0 does not \nproperly represent the portName to the user if the portName contains \nreserved characters. This could allow an authenticated user to alter the\n UI of the Brocade Switch and change ports display.","publishedAt":"2024-04-05T02:33:46.116Z","updatedAt":"2025-02-13T17:25:59.081Z","severity":{"score":4.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","source":"brocade"},"assigner":"brocade","products":["Brocade Fabric OS"],"affected":[{"vendor":"Brocade","product":"Fabric OS","defaultStatus":"unaffected","versions":[{"version":"Versions v9.x and before v9.2.0","status":"affected"}]}],"references":["https://support.broadcom.com/external/content/SecurityAdvisories/0/23214","https://security.netapp.com/advisory/ntap-20240628-0005/"],"weaknesses":["CWE-346"],"ingestedAt":"2026-10-29T20:06:42.242Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/5xxx/CVE-2023-5973.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-5973","state":"PUBLISHED","datePublished":"2024-04-05T02:33:46.116Z","dateUpdated":"2025-02-13T17:25:59.081Z","assignerShortName":"brocade","assignerOrgId":"87b297d7-335e-4844-9551-11b97995a791","dateReserved":"2023-11-06T20:20:06.784Z"},"containers":{"cna":{"title":"Truncated port name","descriptions":[{"lang":"en","value":"Brocade\n Web Interface in Brocade Fabric OS v9.x and before v9.2.0 does not \nproperly represent the portName to the user if the portName contains \nreserved characters. This could allow an authenticated user to alter the\n UI of the Brocade Switch and change ports display."}],"affected":[{"vendor":"Brocade","product":"Fabric OS","defaultStatus":"unaffected","versions":[{"version":"Versions v9.x and before v9.2.0","status":"affected"}]}],"references":[{"url":"https://support.broadcom.com/external/content/SecurityAdvisories/0/23214"},{"url":"https://security.netapp.com/advisory/ntap-20240628-0005/"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-346","description":"CWE-346 Origin Validation Error","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"brocade","orgId":"87b297d7-335e-4844-9551-11b97995a791","dateUpdated":"2024-06-28T16:05:57.743Z"},"impacts":[{"capecId":"CAPEC-469","descriptions":[{"lang":"en","value":"CAPEC-469 HTTP DoS"}]}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-5973","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-04-05T15:54:19.812462Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-06-04T17:28:45.659Z"}},{"title":"CVE Program Container","references":[{"url":"https://support.broadcom.com/external/content/SecurityAdvisories/0/23214","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20240628-0005/","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T08:14:25.193Z"}}]}}}