Local Password Exposure in Brocade Fabric OS Services

CVE-2022-28170

Summary

The Brocade Fabric OS Web Application services prior to specific versions are susceptible to information disclosure. The application fails to adequately protect sensitive server and user passwords by storing them in debug statements. A local user could potentially access these debug logs, thereby extracting confidential password data, which could significantly compromise system security. Organizations using affected versions should prioritize updating their systems to mitigate the risk associated with this vulnerability.

References