Brocade Fabric OS Vulnerability: Encoded Session Passwords Printed on Session Storage
CVE-2024-29953

4.3MEDIUM

Key Information:

Vendor

Brocade
Status
Fabric Operating System
Vendor
CVE Published:
26 June 2024

What is CVE-2024-29953?

A vulnerability in the web interface in Brocade Fabric OS before v9.2.1, v9.2.0b, and v9.1.1d prints encoded session passwords on session storage for Virtual Fabric platforms. This could allow an authenticated user to view other users' session encoded passwords.

References

https://support.broadcom.com/web/ecx/support-content-noti...

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.