CVE-2022-28163

In Brocade SANnav before Brocade SANnav 2.2.0, multiple endpoints associated with Zone management are susceptible to SQL injection, allowing an attacker to run…

published May 6, 2022

CVSS
—
EPSS
1%
Percentile
60.4
In the wild
Unconfirmed
What it is

⚠️ SQL injection vulnerabilities in Zone management allow attackers to run arbitrary commands — think of it as a sneaky chef swapping ingredients in your favorite dish! 🍽️ This SQL injection flaw is like a chef who can just add any random ingredient to the recipe without anyone checking — you could end up with a dish that's not just unappetizing, but downright dangerous! An attacker could manipulate the database in ways that could lead to data leaks, data corruption, or even unauthorized access to sensitive information. This can be absolutely devastating for an organization relying on these systems for secure data management.

Put simply

This SQL injection flaw is like a chef who can just add any random ingredient to the recipe without anyone checking — you could end up with a dish that's not just unappetizing, but downright dangerous! This vulnerability in Brocade SANnav allows SQL injection by exploiting multiple endpoints tied to Zone management, enabling attackers to execute arbitrary SQL commands on the database.

What to do

An attacker could manipulate the database in ways that could lead to data leaks, data corruption, or even unauthorized access to sensitive information. This can be absolutely devastating for an organization relying on these systems for secure data management. Upgrade to Brocade SANnav version 2.2.0 or later to close these vulnerabilities. It's also wise to review and sanitize user inputs in your forms to prevent such exploits in the future. You've got this! By taking these steps, you'll be bolstering your defenses in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00936 · 60.4th percentile
Published
2022-05-06T16:01Z
EPSS history
Timeline
  • 06 MAY 16:01Z
    In Brocade SANnav before Brocade SANnav 2.2.0, multiple endpoints associated with Zone management are susceptible to SQL injection, allowing an attacker to run…
    cvelistv5