Description (CNA)
An Access Control Bypass vulnerability exists in the Role-Based Access Control (RBAC) validation engine of Brocade Fabric OS versions before 10.0.1. When processing certain management protocol operations, the RBAC engine incorrectly categorizes non-standard action opcodes during permission checks. This allows authenticated users with read-only management privileges to bypass access controls and execute restricted administrative operations.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Brocade / Fabric OS | affected 0 before 10.0.1 |
CWE
CWE-269
References
ADP enrichment
No English description supplied.
No references supplied.