Path Traversal in Brocade SANnav Before 3.0.0a

Executive Summary

This is a path traversal vulnerability in Brocade SANnav before version 3.0.0a. It affects the Zone Alias Import flow feature and allows a local authenticated attacker to write uploaded content outside the intended directory.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check if your Brocade SANnav version is before 3.0.0a. Inspect logs for unusual file uploads or path traversal attempts in the Zone Alias Import flow feature. Monitor for unauthorized file writes outside intended directories.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to place malicious files in unintended system locations, potentially leading to unauthorized access, data corruption, or further system compromise.

Useful 0 Not Useful 0

Compliance Impact

The vulnerability allows local authenticated attackers to write uploaded content outside intended directories, which could lead to unauthorized data access or modification. This may violate data integrity and confidentiality requirements under GDPR and HIPAA if sensitive data is exposed or altered.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade Brocade SANnav to version 3.0.0a or later to address the path traversal vulnerability in the Zone Alias Import flow feature.

Useful 0 Not Useful 0