medium5.4
CVE-2018-6447
A Reflective XSS Vulnerability in HTTP Management Interface in Brocade Fabric OS versions before Brocade Fabric OS v9.0.0, v8.2.2c, v8.2.1e, v8.1.2k, v8.2.0_CB…
Impact
A Reflective XSS Vulnerability in HTTP Management Interface in Brocade Fabric OS versions before Brocade Fabric OS v9.0.0, v8.2.2c, v8.2.1e, v8.1.2k, v8.2.0_CBN3, v7.4.2g could allow authenticated attackers with access to the web interface to hijack a user’s session and take over the account.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Broadcom | Fabric Operating System | Versions 2.1.2, 2.2, 3.1, 5.0.5b, 5.2.0, 5.2.0a |