Brocade Fabric OS Privilege Escalation Vulnerability

A vulnerability exists in Brocade Fabric OS authentication and management services prior to version 9.2.1c2, as well as in versions 9.2.2 through 9.2.2a. This vulnerability allows an authenticated, remote attacker with administrative credentials to execute arbitrary commands as the root user. The issue arises from an insecure configuration that can be exploited using the 'supportsave', 'seccertmgmt', and 'configupload' commands.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to execute commands with root privileges.

Remediation

Users can upgrade to Brocade Fabric OS versions 10.0.0, 9.2.2b, or 9.2.1c2 to address this vulnerability.