CVE-2020-15372

A vulnerability in the command-line interface in Brocade Fabric OS before Brocade Fabric OS v8.2.2a1, 8.2.2c, v7.4.2g, v8.2.0_CBN3, v8.2.1e, v8.1.2k, v9.0.0, could allow a local authenticated attacker to modify shell variables, which may lead to an escalation of privileges or bypassing the logging.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.5 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
brocadeCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 22%
VendorProductVersion
broadcomfabric_operating_system
𝑥
< 7.4.2g
broadcomfabric_operating_system
8.0.0 ≤
𝑥
< 8.1.2k
broadcomfabric_operating_system
8.2.0 ≤
𝑥
< 8.2.0_cbn3
broadcomfabric_operating_system
8.2.1 ≤
𝑥
< 8.2.1e
broadcomfabric_operating_system
8.2.2 ≤
𝑥
< 8.2.2a1
broadcomfabric_operating_system
8.2.2b ≤
𝑥
< 8.2.2c
𝑥
= Vulnerable software versions