CVE-2021-27791 | BDVDB-2026-158673 Detail

Description#

The function that is used to parse the Authentication header in Brocade Fabric OS Web application service before Brocade Fabric OS v9.0.1a and v8.2.3a fails to properly process a malformed authentication header from the client, resulting in reading memory addresses outside the intended range. An unauthenticated attacker could discover a request, which could bypass the authentication process.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12021-08-12Record published in the CVE List.
2. Version 22024-08-03Most recent update recorded in the CVE List.