Vulnerability Description
A vulnerability in the role-based access control (RBAC) functionality of the Brocade SANNav before 2.2.0 could allow an authenticated, remote attacker to access resources that they should not be able to access and perform actions that they should not be able to perform. The vulnerability exists because restrictions are not performed on Server side to ensure the user has required permission before processing requests.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Broadcom | Sannav | < 2.2.0 |
References
- https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brVendor Advisory
- https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brVendor Advisory
FAQ
What is CVE-2022-28165?
CVE-2022-28165 is a vulnerability with a CVSS score of 8.8 (HIGH). A vulnerability in the role-based access control (RBAC) functionality of the Brocade SANNav before 2.2.0 could allow an authenticated, remote attacker to access resources that they should not be able ...
How severe is CVE-2022-28165?
CVE-2022-28165 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-28165?
Check the references section above for vendor advisories and patch information. Affected products include: Broadcom Sannav.