Is CVE-2016-8207 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2016-8207 being exploited in the wild.

How severe is CVE-2016-8207?

High severity, with a CVSS score of 7.5, published 14 January 2017.

Which products and versions are affected?

Brocade Network Advisor Versions prior to and including 14.0.2.

Is there a fix for CVE-2016-8207?

A patch was published on 2017-01-06: Initial vendor advisory published by Brocade Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2016-8207 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2016-8207?

Check whether you run Brocade Network Advisor. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2016-8207: Brocade Network Advisor directory traversal in CliMonitorReportServlet

CVE-2016-8207 · Severity: high · CVSS 7.5 · Published 2017-01-14

Brocade Network Advisor, a management platform for storage area networks (SAN), contains a security flaw that allows unauthorized individuals to access files on the server. By exploiting this vulnerability, an attacker could remotely steal sensitive configuration data or user information without needing a password. This could lead to a significant breach of confidentiality and provide a foothold for further attacks on the network infrastructure.

Technologies: Brocade Network Advisor. Vendors: Brocade.

Quick answers

Is CVE-2016-8207 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2016-8207 being exploited in the wild.
How severe is CVE-2016-8207?: High severity, with a CVSS score of 7.5, published 14 January 2017.
Which products and versions are affected?: Brocade Network Advisor Versions prior to and including 14.0.2.
Is there a fix for CVE-2016-8207?: A patch was published on 2017-01-06: Initial vendor advisory published by Brocade Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2016-8207 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2016-8207?: Check whether you run Brocade Network Advisor. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A directory traversal vulnerability exists within the CliMonitorReportServlet of Brocade Network Advisor due to insufficient validation of user-supplied input used in file path operations. An unauthenticated remote attacker can exploit this by sending specially crafted HTTP requests containing path traversal sequences (e.g., ../) to access files outside of the intended web directory. Successful exploitation allows the disclosure of sensitive information under the context of the SYSTEM account. The vulnerability is fixed in Brocade Network Advisor versions 14.0.3, 14.1.1, and all subsequent releases.

Affected products

Brocade Network Advisor Versions prior to and including 14.0.2

Timeline

2016-10-17: disclosed: Vulnerability reported to vendor via ZDI
2017-01-06: patched: Initial vendor advisory published by Brocade
2017-01-14: advisory: NVD published CVE-2016-8207

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.