A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1

An information disclosure vulnerability exists in the SupportLink diagnostic collection utilities of Brocade Fabric OS versions before 10.0.1

Password Exposure in Brocade Fabric OS

password management API prints sensitive information in log files

CLI allows upload or transfer files of dangerous types

A buffer overflow vulnerability in “diagstatus” command

Multiple commands print sensitive information in the terminal

An information disclosure in the web interface of Brocade Fabric OS

An input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric OS versions before 10.0.1

A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric OS versions before…

An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1

An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS versions before 10.0.1

Segmentation fault in Brocade Fabric OS after Brocade Fabric OS v9.0

An authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST API gateway

A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releases allows an authenticated user, regardless of their…

An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before 10.0.1

Encoded session passwords on session storage for Virtual Fabric platforms

Truncated port name

A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1

A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before 10.0.1

Directory transversal vulnerability in Brocade Fabric OS before 9.2.1c2 and 9.2.2 through 9.2.2a using various shell commands

Directory transversal vulnerability in Brocade Fabric OS before 9.2.1 using grep command

Path transversal vulnerability potentially leading to sensitive information disclosure