High severity8.1NVD Advisory· Published Jan 22, 2019· Updated Jun 17, 2026
CVE-2018-6443
CVE-2018-6443
Description
A vulnerability in Brocade Network Advisor Versions before 14.3.1 could allow an unauthenticated, remote attacker to log in to the JBoss Administration interface of an affected system using an undocumented user credentials and install additional JEE applications. A remote unauthenticated user who has access to Network Advisor client libraries and able to decrypt the Jboss credentials could gain access to the Jboss web console.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:brocade:network_advisor:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:brocade:network_advisor:*:*:*:*:*:*:*:*range: <14.3.1
- (no CPE)range: <14.3.1
- (no CPE)range: All versions prior to version 14.3.1
- cpe:2.3:a:netapp:brocade_network_advisor:-:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
3- security.netapp.com/advisory/ntap-20190411-0005/nvdThird Party Advisory
- www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-743nvdThird Party Advisory
- packetstormsecurity.com/files/153035/Brocade-Network-Advisor-14.4.1-Unauthenticated-Remote-Code-Execution.htmlnvd
News mentions
0No linked articles in our index yet.