VULNERABILITY INTELLIGENCE
CVE-2018-6446
CVSS score9.8 CRITICAL
EPSS probability1.35%
CISA KEVNot currently listed
Published2020-06-29
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
A vulnerability in Brocade Network Advisor Version Before 14.3.1 could allow an unauthenticated, remote attacker to log in to the JBoss Administration interface of an affected system using an undocumented user credentials and install additional JEE applications.
Weakness classification
- CWE-798: Use of Hard-coded Credentials
Primary references
- sirt@brocade.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory