CVE-2019-16205 - A vulnerability, in Brocade SANnav versions before v2.0, could allow remote attackers to brute-force a valid session ID

Back Back to CVE browser

HIGH

A vulnerability, in Brocade SANnav versions before v2.0, could allow remote attackers to brute-force a valid session ID

Published Nov 8, 2019

8.8

HIGH

CVSS 3.1

EPSS 1.29%

Description

A vulnerability, in Brocade SANnav versions before v2.0, could allow remote attackers to brute-force a valid session ID. The vulnerability is due to an insufficiently random session ID for several post-authentication actions in the SANnav portal.

Affected products

Vendor Brocade Communications Systems, Inc. Product Brocade SANnav Default
n/a
- Version
  versions before v2.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Brocade Communications Systems, Inc.

Brocade SANnav

n/a

Version	Status	Constraints
versions before v2.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-330

Insufficient Randomness

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-7017
Advisory
https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-864
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-7017		Advisory
https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-864		x_refsource_CONFIRMVendor Advisory