High severity7.5NVD Advisory· Published Jan 22, 2019· Updated Jun 17, 2026

CVE-2018-6445

Description

A Vulnerability in Brocade Network Advisor versions before 14.0.3 could allow a remote unauthenticated attacker to export the current user database which includes the encrypted (not hashed) password of the systems. The attacker could gain access to the Brocade Network Advisor System after extracting/decrypting the passwords.

Affected products

Brocade/Network Advisor3 versions
cpe:2.3:a:brocade:network_advisor:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:brocade:network_advisor:*:*:*:*:*:*:*:*range: <14.0.3
- (no CPE)range: <14.0.3
- (no CPE)range: All versions prior to version 14.0.3
NetApp/Brocade Network Advisor
cpe:2.3:a:netapp:brocade_network_advisor:-:*:*:*:*:*:*:*
Broadcom Corporation/Brocade Network Advisorllm-fuzzy
Range: <14.0.3

Patches

Vulnerability mechanics

References

security.netapp.com/advisory/ntap-20190411-0005/nvdThird Party Advisory
www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-745nvdVendor Advisory
support.lenovo.com/us/en/product_security/LEN-25655nvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000