CVE-2025-4661

Description

A path transversal vulnerability in Brocade Fabric OS 9.1.0 through 9.2.2 could allow a local admin user to gain access to files outside the intended directory potentially leading to the disclosure of sensitive information. Note: Admin level privilege is required on the switch in order to exploit

PUBLISHED Reserved 2025-05-13 | Published 2025-06-19 | Updated 2025-06-20 | Assigner brocade

Problem types

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Product status

References

support.broadcom.com/...l/content/SecurityAdvisories/0/35814

cve.org (CVE-2025-4661)

nvd.nist.gov (CVE-2025-4661)

Download JSON