CyberRota Analysis
AI-GeneratedA race condition and thread-safety vulnerability in the web management daemon of Brocade Fabric OS versions prior to 10.0.1 can lead to inaccurate audit records and potential access control bypasses due to the processing of stale or incorrect client IP addresses. This issue primarily affects systems relying on PAM modules for user authentication and may compromise AAA evaluation or Calling-Station-ID ACL policies. Organizations using affected versions should prioritize remediation to mitigate risks associated with unauthorized access and compliance violations.
Original NVD Description
A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. When handling user authentication requests across a multi-threaded execution pool, this race condition causes PAM modules to process stale or incorrect client IP addresses and switch context numbers. This leads to inaccurate audit records and potential access control bypasses where AAA evaluation or Calling-Station-ID ACL policies rely on client IP attributes.