CVEvulnerability
CVE-2016-8206
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-01-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:P
- Weaknesses
- CWE-22
Description
A Directory Traversal vulnerability in servlet SoftwareImageUpload in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to write to arbitrary files, and consequently delete the files.
Affected configurations
• brocade network advisor (<= 14.0.2)
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://www.securityfocus.com/bid/95692 Third Party Advisory, VDB Entry
- http://www.zerodayinitiative.com/advisories/ZDI-17-051 www.zerodayinitiative.com
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03785en_us support.hpe.com
- https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-179 www.broadcom.com
- http://www.securityfocus.com/bid/95692 Third Party Advisory, VDB Entry
- http://www.zerodayinitiative.com/advisories/ZDI-17-051 www.zerodayinitiative.com
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03785en_us support.hpe.com
- https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-179 www.broadcom.com