CVE-2020-15378

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

The OVA version of Brocade SANnav before version 2.1.1 installation with IPv6 networking exposes the docker container ports to the network, increasing the potential attack surface.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Jun 9, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-153797.5Brocade SANnav before v.2.1.0a could allow remote attackers cause a denial-of-service condition due to a lack of proper validation, of the lCVE-2020-15387.8An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory. To exploit this vulnerability, aCVE-2020-153807.5Brocade SANnav before version 2.1.1 logs account credentials at the ‘trace’ logging level.CVE-2020-153817.5Brocade SANnav before version 2.1.1 contains an Improper Authentication vulnerability that allows cleartext transmission of authentication cCVE-2020-153827.2Brocade SANnav before version 2.1.1 uses a hard-coded administrator account with the weak password ‘passw0rd’ if a password is not provided CVE-2020-153837.5Running security scans against the SAN switch can cause config and secnotify processes within the firmware before Brocade Fabric OS v9.0.0, CVE-2020-153845.3Brocade SANNav before version 2.1.1 contains an information disclosure vulnerability. Successful exploitation of internal server informationCVE-2020-153855.4Brocade SANnav before version 2.1.1 allows an authenticated attacker to list directories, and list files without permission. As a result, usCVE-2020-153865.3Brocade Fabric OS prior to v9.0.1a and 8.2.3a and after v9.0.0 and 8.2.2d may observe high CPU load during security scanning, which could leCVE-2020-153877.4The host SSH servers of Brocade Fabric OS before Brocade Fabric OS v7.4.2h, v8.2.1c, v8.2.2, v9.0.0, and Brocade SANnav before v2.1.1 utilizCVE-2020-153886.5A vulnerability in the Brocade Fabric OS before Brocade Fabric OS v9.0.1a, v8.2.3, v8.2.0_CBN4, and v7.4.2h could allow an authenticated CLICVE-2020-153896.5jp2/opj_decompress.c in OpenJPEG through 2.3.1 has a use-after-free that can be triggered if there is a mix of valid and invalid files in a
CVE-2020-15378: Medium severity, CVSS 5.3 | Vulnix