Description (CNA)
A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before 10.0.1. When handling concurrent incoming network management FCIP requests, a timing window exists between when a request populates the address variable and when the service constructs and returns the response context. As a result, the first request adopts the modified context, causing the service to return sensitive management details or configuration data belonging to the second context back to the original requester.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Brocade / Fabric OS | affected 0 before 10.0.1 |
CWE
CWE-362
References
ADP enrichment
No English description supplied.
No references supplied.