Brocade SANnav before version 2.1.1 allows an authenticated attacker to list directories, and list files without permission. As a result, users without permission can see folders, and hidden files, and can create directories without permission.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15385
Reference (s):
- https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1486
- URL: https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1486