What’s Vulnerable › Vulnerabilities

CVE-2021-27789

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-03-18 · updated 2026-06-17

Description

The Web application of Brocade Fabric OS before versions Brocade Fabric OS v9.0.1a and v8.2.3a contains debug statements that expose sensitive information to the program's standard output device. An attacker who has compromised the FOS system may utilize this weakness to capture sensitive information, such as user credentials.

Affected products

• Brocade Fabric OS: before 8.2.3a; from 9.0.0 before 9.0.1a — fixed in 8.2.3a, 9.0.1a

How to fix

Upgrade to a fixed version: Brocade Fabric OS 8.2.3a, 9.0.1a. Check the vendor advisory for mitigations.

References

• https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1494
• https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1494

Get alerted when CVE-2021-27789 or the next vulnerability affects your stack