8.1

CVE-2018-6443: brocade communications systems, inc. brocade network advisor Credentials Management Errors

CVSS: 8.1v3.0HighModified
Published 22-01-2019Last modified 05-08-2024
Open JSON

Vulnerability summary

CVE-2018-6443 is a high (CVSS 8.1) Credentials Management Errors vulnerability in brocade communications systems, inc. brocade network advisor. EPSS estimates a 7.40% chance of exploitation in the next 30 days, higher than 94.3% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
44/100
0100
Medium · default modelHow is this calculated?
CVSS score
8.1/10
010
High · v3.0 (NVD)
EPSS score
7.40%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1exploit-database

Timeline

  1. 22-01-2019
    PublishedVulnerability first disclosed.
  2. 05-08-2024
    Last modifiedVulnerability information updated.

Description

A vulnerability in Brocade Network Advisor Versions before 14.3.1 could allow an unauthenticated, remote attacker to log in to the JBoss Administration interface of an affected system using an undocumented user credentials and install additional JEE applications. A remote unauthenticated user who has access to Network Advisor client libraries and able to decrypt the Jboss credentials could gain access to the Jboss web console.

CVSS metrics

2 scores · 1 source · 2 versions

EPSS trend

Probability

7.40%

Chance of exploitation in the next 30 days

Percentile

94%

Versus all other CVEs

30-day change

0.00 pp

From 7.40% on 18-09-2026

18-09-202618-10-2026
EPSS score
7.40%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found
  • exploit-databasejavaVerified

    Brocade Network Advisor 14.4.1 - Unauthenticated Remote Code Execution

    Maturity: poc

Weaknesses

CWE · root cause

Affected systems

Brocade1 product
Brocade communications systems, inc.1 product
Netapp1 product

3 vendors · 3 products

References

3 links