CVE-2025-4661 — Path transversal vulnerability potentially leading to sensitive information disclosure

CVE-2025-4661

Path transversal vulnerability potentially leading to sensitive information disclosure PUBLISHED

Description (CNA)

A path transversal vulnerability in Brocade Fabric OS 9.1.0 through 9.2.2 could allow a local admin user to gain access to files outside the intended directory potentially leading to the disclosure of sensitive information. Note: Admin level privilege is required on the switch in order to exploit

Affected (CNA)

Vendor / product	Versions
Brocade / Fabric OS	affected Brocade Fabric OS 9.1.0 through 9.2.2

CWE

CWE-22

References

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/35814

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.