CVEvulnerability
CVE-2016-8207
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-01-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-22
Description
A Directory Traversal vulnerability in CliMonitorReportServlet in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to read arbitrary files including files with sensitive user information.
Affected configurations
• brocade network advisor (<= 14.0.2)
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://www.securityfocus.com/bid/95691 Third Party Advisory, VDB Entry
- http://www.zerodayinitiative.com/advisories/ZDI-17-052 www.zerodayinitiative.com
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03785en_us support.hpe.com
- https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-180 www.broadcom.com
- http://www.securityfocus.com/bid/95691 Third Party Advisory, VDB Entry
- http://www.zerodayinitiative.com/advisories/ZDI-17-052 www.zerodayinitiative.com
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03785en_us support.hpe.com
- https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-180 www.broadcom.com