CVE-2022-28165
Published: 06 May 2022
Summary
CVE-2022-28165 is a high-severity an unspecified weakness vulnerability in Broadcom Sannav. Its CVSS base score is 8.8 (High).
Operationally, ranked in the top 26.1% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-32619
Vulnerability details
A vulnerability in the role-based access control (RBAC) functionality of the Brocade SANNav before 2.2.0 could allow an authenticated, remote attacker to access resources that they should not be able to access and perform actions that they should not be…
more
able to perform. The vulnerability exists because restrictions are not performed on Server side to ensure the user has required permission before processing requests.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.