Vulnerability Details : CVE-2018-6446
A vulnerability in Brocade Network Advisor Version Before 14.3.1 could allow an unauthenticated, remote attacker to log in to the JBoss Administration interface of an affected system using an undocumented user credentials and install additional JEE applications.
Published
2020-06-29 18:15:12
Updated
2020-07-07 01:27:48
Products affected by CVE-2018-6446
- cpe:2.3:a:broadcom:brocade_network_advisor:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2018-6446
0.52%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 77 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2018-6446
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST | |
9.8
|
CRITICAL | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
3.9
|
5.9
|
NIST |
CWE ids for CVE-2018-6446
-
The product contains hard-coded credentials, such as a password or cryptographic key.Assigned by: nvd@nist.gov (Primary)
References for CVE-2018-6446
-
https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-841
Bsa-2018-841Vendor Advisory
Jump to