Skip to content
OpenAdvisories
Unscored CVE-2021-27791 EUVD-2021-14532GHSA-vg73-mjx3-8p9g

The function that is used to parse the Authentication header in Brocade Fabric OS Web application service before Brocade Fabric OS v9.0.1a …

Published Aug 12, 2021 · Updated Aug 3, 2024 · Assigned by brocade

Description

The function that is used to parse the Authentication header in Brocade Fabric OS Web application service before Brocade Fabric OS v9.0.1a and v8.2.3a fails to properly process a malformed authentication header from the client, resulting in reading memory addresses outside the intended range. An unauthenticated attacker could discover a request, which could bypass the authentication process.

Affected products

VendorProductAffectedFixed
— Brocade Fabric OS Brocade Fabric OS before Brocade Fabric OS v9.0.1a and v8.2.3a —

References