CVE-2024-29953mediumCWE-922

CVE-2024-29953: medium-severity vulnerability in Brocade Fabric OS

Encoded session passwords on session storage for Virtual Fabric platforms

Published · Updated

Follow this CVE+ Monitor Fabric OS

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.3epss 0.3%
A vulnerability in the web interface in Brocade Fabric OS before v9.2.1, v9.2.0b, and v9.1.1d prints encoded session passwords on session storage for Virtual Fabric platforms. This could allow an authenticated user to view other users' session encoded passwords.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Affected products
Brocade · Fabric OS
Related CVEs — Brocade Fabric OS

In the same product, most dangerous first.

CVE-2025-1976HIGHCode injection exposure in Fabric OS 9.1.0 through 9.1.1d6EPSS 0.7%KEVCVE-2026-94579MEDIUMCVE-2026-94579EPSS 3.1%CVE-2026-87666HIGHCVE-2026-87666EPSS 2.6%CVE-2026-87680HIGHCVE-2026-87680EPSS 1.9%CVE-2026-87673HIGHCVE-2026-87673EPSS 1.8%CVE-2026-87682HIGHCVE-2026-87682EPSS 1.7%