CVE-2020-15385 : What You Need to Know

Brocade SANnav before version 2.1.1 allows an authenticated attacker to list directories, list files, and create directories without permission, leading to an information disclosure vulnerability.

Understanding CVE-2020-15385

Brocade SANnav software before version 2.1.1 is susceptible to an information disclosure vulnerability that enables unauthorized users to access directories and files.

What is CVE-2020-15385?

CVE-2020-15385 is a security vulnerability in Brocade SANnav software that allows authenticated attackers to view directories, files, and create directories without proper permissions.

The Impact of CVE-2020-15385

The vulnerability in Brocade SANnav before version 2.1.1 can result in unauthorized users viewing sensitive information, including folders, hidden files, and creating directories without permission.

Technical Details of CVE-2020-15385

Brocade SANnav before version 2.1.1 is affected by this vulnerability.

Vulnerability Description

An authenticated attacker can exploit this vulnerability to list directories, files, and create directories without the necessary permissions.

Affected Systems and Versions

Product: Brocade SANnav
Versions Affected: Brocade SANnav before version 2.1.1

Exploitation Mechanism

The vulnerability allows authenticated attackers to list directories, files, and create directories without proper authorization.

Mitigation and Prevention

To address CVE-2020-15385, follow these steps:

Immediate Steps to Take

Update Brocade SANnav to version 2.1.1 or later to mitigate the vulnerability.
Restrict access to sensitive directories and files.

Long-Term Security Practices

Regularly monitor and audit user permissions and activities.
Implement access controls to limit unauthorized access to directories and files.

Patching and Updates

Apply security patches and updates provided by Brocade to ensure the software is up-to-date and secure.