CVE-2022-28169

Severity Score

8.8

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Brocade Webtools in Brocade Fabric OS versions before Brocade Fabric OS versions v9.1.1, v9.0.1e, and v8.2.3c could allow a low privilege webtools, user, to gain elevated admin rights, or privileges, beyond what is intended or entitled for that user. By exploiting this vulnerability, a user whose role is not an admin can create a new user with an admin role using the operator session id. The issue was replicated after intercepting the admin, and operator authorization headers sent unencrypted and editing a user addition request to use the operator's authorization header.

Brocade Webtools en versiones de Brocade Fabric OS anteriores a v9.1.1, v9.0.1e y v8.2.3c podrían permitir que un usuario de webtools poco privilegiado obtuviera derechos de administrador elevados, o privilegios, más allá de lo previsto o autorizado para ese usuario. Al explotar esta vulnerabilidad, un usuario cuyo rol no es de administrador puede crear un nuevo usuario con rol de administrador usando el identificador de sesión del operador. El problema fue replicado después de interceptar los encabezados de autorización del administrador y del operador enviadas sin cifrar y editar una petición de adición de usuario para usar el encabezado de autorización del operador

*Credits: N/A

CVSS Scores

NISTv3.1 8.8

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2022-03-29 CVE Reserved
2022-10-25 CVE Published
2024-05-17 EPSS Updated
2024-08-03 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-269: Improper Privilege Management

CAPEC

References (2)

URL	Tag	Source
https://security.netapp.com/advisory/ntap-20230127-0001	Third Party Advisory

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2075	2023-03-02

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Broadcom Search vendor "Broadcom"		Fabric Operating System Search vendor "Broadcom" for product "Fabric Operating System"				>= 8.0.0 < 8.2.3c Search vendor "Broadcom" for product "Fabric Operating System" and version " >= 8.0.0 < 8.2.3c"		-		Affected
Broadcom Search vendor "Broadcom"		Fabric Operating System Search vendor "Broadcom" for product "Fabric Operating System"				>= 9.0.0 < 9.0.1e Search vendor "Broadcom" for product "Fabric Operating System" and version " >= 9.0.0 < 9.0.1e"		-		Affected
Broadcom Search vendor "Broadcom"		Fabric Operating System Search vendor "Broadcom" for product "Fabric Operating System"				>= 9.1.0 < 9.1.1 Search vendor "Broadcom" for product "Fabric Operating System" and version " >= 9.1.0 < 9.1.1"		-		Affected