CVE-2021-27789
Last modified
CVE-2021-27789 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. The Web application of Brocade Fabric OS before versions Brocade Fabric OS v9.0.1a and v8.2.3a contains debug statements that expose sensitive information to the program's standard output device. An attacker who has compromised the FOS system may utilize this weakness to capture sensitive information, such as user credentials.. EPSS estimates a 0.79% chance of exploitation in the next 30 days.
Description
The Web application of Brocade Fabric OS before versions Brocade Fabric OS v9.0.1a and v8.2.3a contains debug statements that expose sensitive information to the program's standard output device. An attacker who has compromised the FOS system may utilize this weakness to capture sensitive information, such as user credentials.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Broadcom | Fabric Operating System | < 8.2.3a |
| Broadcom | Fabric Operating System | >= 9.0.0, < 9.0.1a |
References
- https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1494Not Applicable, Vendor Advisory
- https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1494Not Applicable, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-27789?
How severe is CVE-2021-27789?
How do I fix CVE-2021-27789?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-27782HCL BigFix Mobile / Modern Client Management Admin and Confi…7.5
- CVE-2021-27783User generated PPKG file for Bulk Enroll may have unencrypte…6.5
- CVE-2021-27784The provided HCL Launch Container images contain non-unique …7.5
- CVE-2021-27785HCL Commerce's Remote Store server could allow a local attac…5
- CVE-2021-27786Cross-origin resource sharing (CORS) enables browsers to per…9.8
- CVE-2021-27788HCL Verse is susceptible to a Cross Site Scripting (XSS) vul…6.1
- CVE-2021-27790The command ipfilter in Brocade Fabric OS before Brocade Fab…7.8
- CVE-2021-27791The function that is used to parse the Authentication header…5.4
- CVE-2021-27792The request handling functions in web management interface o…7.8
- CVE-2021-27793ntermittent authorization failure in aaa tacacs+ with Brocad…5.3
- CVE-2021-27794A vulnerability in the authentication mechanism of Brocade F…7.8
- CVE-2021-27795Brocade Fabric OS (FOS) hardware platforms running any vers…8.1
Are you affected by CVE-2021-27789?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST