High WID-SEC-2024-0862 1 CVE

Broadcom Brocade SANnav: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

Published Apr 15, 2024 · Updated Oct 14, 2024 · Revision 2 · de-DE

Vendor: Broadcom Product: Brocade SANnav

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Broadcom Brocade SANnav ausnutzen, um Sicherheitsvorkehrungen zu umgehen.

Product

Brocade SANnav ist eine Managementlösung für Storage Area Networks (SAN).

Vulnerabilities 1

Critical 9.8

CVE-2023-34478 Public exploit

Apache Shiro before 1.12.0, or 2.0.0-alpha-3, may be susceptible to a path traversal attack when used together with APIs or other web frameworks that route requests based on non-normalized requests.

Apache Shiro, before 1.12.0 or 2.0.0-alpha-3, may be susceptible to a path traversal attack that results in an authentication bypass when used together with APIs or other web frameworks that route requests based on non-normalized requests. Mitigation: Update …

Apache Software Foundation Apache Shiro shiro shiro Debian Ubuntu Maven

Jul 24, 2023

Revision history

2024-10-14 #2
Neue Updates aufgenommen
2024-04-15 #1
Initiale Fassung

References

Brocade Security Advisory vom 2024-04-15
https://support.broadcom.com/external/content/SecurityAdvisories/0/23256
### vom 2024-10-15
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24999