CVE-2024-29953

Encoded session passwords on session storage for Virtual Fabric platforms

CVSS 4.3 MEDIUMEPSS 0.3%CWE-922

A vulnerability in the web interface in Brocade Fabric OS before v9.2.1, v9.2.0b, and v9.1.1d prints encoded session passwords on session storage for Virtual Fabric platforms. This could allow an authenticated user to view other users' session encoded passwords.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Produtos afetados

Brocade · Fabric OS

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://security.netapp.com/advisory/ntap-20240822-0009/https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/23227