Arbitrary Environment Variable Injection Vulnerability in Brocade Fabric OS

Arbitrary Environment Variable Injection Vulnerability in Brocade Fabric OS

CVE-2018-6441 · HIGH Severity

AV:L/AC:L/AU:N/C:C/I:C/A:C

A vulnerability in Secure Shell implementation of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to provide arbitrary environment variables, and bypass the restricted configuration shell.

Learn more about our Web Application Penetration Testing UK.