medium6.5
CVE-2022-28170
Brocade Fabric OS Web Application services before Brocade Fabric v9.1.0, v9.0.1e, v8.2.3c, v7.4.2j store server and user passwords in the debug statements.
Impact
Brocade Fabric OS Web Application services before Brocade Fabric v9.1.0, v9.0.1e, v8.2.3c, v7.4.2j store server and user passwords in the debug statements. This could allow a local user to extract the passwords from a debug file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Broadcom | Fabric Operating System | before 7.4.2j from 8.0.0 before 8.2.3c from 9.0.0 before 9.0.1e Version 9.1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://security.netapp.com/advisory/ntap-20230127-0002/
- https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2076
- https://security.netapp.com/advisory/ntap-20230127-0002/
- https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2076