CVE-2023-31428

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Brocade Fabric OS before Brocade Fabric OS v9.1.1c, v9.2.0 contains a vulnerability in the command line that could allow a local user to dump files under user's home directory using grep.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-434

Affected software

No affected versions have been published.

Timeline

Published
Aug 2, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-314295.5Brocade Fabric OS before Brocade Fabric OS 9.1.1c, 9.2.0 contains a vulnerability when using various commands such as “chassisdistribute”, “CVE-2023-31435.4A vulnerability classified as problematic has been found in SourceCodester Online Discussion Forum Site 1.0. Affected is an unknown functionCVE-2023-314305.5A buffer overflow vulnerability in “secpolicydelete” command in Brocade Fabric OS before Brocade Fabric OS v9.1.1c and v9.2.0 could allow anCVE-2023-314315.5A buffer overflow vulnerability in “diagstatus” command in Brocade Fabric OS before Brocade Fabric v9.2.0 and v9.1.1c could allow an authentCVE-2023-314327.8Through manipulation of passwords or other variables, using commands such as portcfgupload, configupload, license, myid, a non-privileged usCVE-2023-314338.8A SQL injection issue in Logbuch in evasys before 8.2 Build 2286 and 9.x before 9.0 Build 2401 allows authenticated attackers to execute SQLCVE-2023-314345.4The parameters nutzer_titel, nutzer_vn, and nutzer_nn in the user profile, and langID and ONLINEID in direct links, in evasys before 8.2 BuiCVE-2023-314358.1Multiple components (such as Onlinetemplate-Verwaltung, Liste aller Teilbereiche, Umfragen anzeigen, and questionnaire previews) in evasys bCVE-2023-314367.8qfq_change_class in net/sched/sch_qfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax can exceed QFQ_MIN_LMAXCVE-2023-314375.3An issue was discovered in systemd 253. An attacker can modify a sealed log file such that, in some views, not all existing and sealed log mCVE-2023-314385.3An issue was discovered in systemd 253. An attacker can truncate a sealed log file and then resume log sealing such that checking the integrCVE-2023-314395.3An issue was discovered in systemd 253. An attacker can modify the contents of past events in a sealed log file and then adjust the file suc