Vulnerability Details : CVE-2023-31424
Brocade SANnav Web interface before Brocade SANnav v2.3.0 and v2.2.2a
allows remote unauthenticated users to bypass web authentication and
authorization.
Published
2023-08-31 01:15:09
Updated
2024-03-21 02:47:36
Products affected by CVE-2023-31424
- cpe:2.3:a:broadcom:brocade_sannav:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2023-31424
0.32%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 71 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2023-31424
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
9.8
|
CRITICAL | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
3.9
|
5.9
|
NIST | |
8.1
|
HIGH | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
2.2
|
5.9
|
Brocade Communications Systems, LLC |
CWE ids for CVE-2023-31424
-
This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.Assigned by: sirt@brocade.com (Secondary)
References for CVE-2023-31424
-
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/22507
Support Content Notification - Support Portal - Broadcom support portalVendor Advisory
-
https://security.netapp.com/advisory/ntap-20240229-0004/
CVE-2023-31424 Brocade SANnav Authentication Bypass Vulnerability | NetApp Product Security
Jump to