CVE-2022-28169

Brocade Webtools in Brocade Fabric OS versions before Brocade Fabric OS versions v9.1.1, v9.0.1e, and v8.2.3c could allow a low privilege webtools, user, to gain elevated admin rights, or privileges, beyond what is intended or entitled for that user. By exploiting this vulnerability, a user whose role is not an admin can create a new user with an admin role using the operator session id. The issue was replicated after intercepting the admin, and operator authorization headers sent unencrypted and editing a user addition request to use the operator's authorization header.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://security.netapp.com/advisory/ntap-20230127-0001/	Third Party Advisory
https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2075	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:broadcom:fabric_operating_system::::::::
	cpe:2.3:o:broadcom:fabric_operating_system::::::::
	cpe:2.3:o:broadcom:fabric_operating_system::::::::

History

No history.

Information

Published : 2022-10-25 21:15

Updated : 2024-02-28 19:29

NVD link : CVE-2022-28169

Mitre link : CVE-2022-28169

CVE.ORG link : CVE-2022-28169

JSON object : View

Products Affected

broadcom

fabric_operating_system

CWE

CWE-269

Improper Privilege Management

{"id": "CVE-2022-28169", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2022-10-25T21:15:38.813", "references": [{"url": "https://security.netapp.com/advisory/ntap-20230127-0001/", "tags": ["Third Party Advisory"], "source": "sirt@brocade.com"}, {"url": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2075", "tags": ["Vendor Advisory"], "source": "sirt@brocade.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-269"}]}], "descriptions": [{"lang": "en", "value": "Brocade Webtools in Brocade Fabric OS versions before Brocade Fabric OS versions v9.1.1, v9.0.1e, and v8.2.3c could allow a low privilege webtools, user, to gain elevated admin rights, or privileges, beyond what is intended or entitled for that user. By exploiting this vulnerability, a user whose role is not an admin can create a new user with an admin role using the operator session id. The issue was replicated after intercepting the admin, and operator authorization headers sent unencrypted and editing a user addition request to use the operator's authorization header."}, {"lang": "es", "value": "Brocade Webtools en versiones de Brocade Fabric OS anteriores a v9.1.1, v9.0.1e y v8.2.3c podr\u00edan permitir que un usuario de webtools poco privilegiado obtuviera derechos de administrador elevados, o privilegios, m\u00e1s all\u00e1 de lo previsto o autorizado para ese usuario. Al explotar esta vulnerabilidad, un usuario cuyo rol no es de administrador puede crear un nuevo usuario con rol de administrador usando el identificador de sesi\u00f3n del operador. El problema fue replicado despu\u00e9s de interceptar los encabezados de autorizaci\u00f3n del administrador y del operador enviadas sin cifrar y editar una petici\u00f3n de adici\u00f3n de usuario para usar el encabezado de autorizaci\u00f3n del operador"}], "lastModified": "2023-03-02T16:05:30.037", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4F6AC152-58BC-4180-8C73-F1355FC621EC", "versionEndExcluding": "8.2.3c", "versionStartIncluding": "8.0.0"}, {"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "903859B2-AA10-4D3C-90A4-0ECE35BF5B72", "versionEndExcluding": "9.0.1e", "versionStartIncluding": "9.0.0"}, {"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F6A6CDCD-FDE7-4D1A-A762-93E9BF700669", "versionEndExcluding": "9.1.1", "versionStartIncluding": "9.1.0"}], "operator": "OR"}]}], "sourceIdentifier": "sirt@brocade.com"}