medium6.8
CVE-2023-31426
The Brocade Fabric OS Commands “configupload” and “configdownload” before Brocade Fabric OS v9.1.1c, v8.2.3d, v9.2.0 print scp, sftp, ftp servers passwords in …
Impact
The Brocade Fabric OS Commands “configupload” and “configdownload” before Brocade Fabric OS v9.1.1c, v8.2.3d, v9.2.0 print scp, sftp, ftp servers passwords in supportsave. This could allow a remote authenticated attacker to access sensitive information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Broadcom | Fabric Operating System | before 8.2.3d from 9.0.0 before 9.1.1c |
Weakness classification
References
- NVD record
- CVE.org record
- https://security.netapp.com/advisory/ntap-20230908-0007/
- https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/22377
- https://security.netapp.com/advisory/ntap-20230908-0007/
- https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/22377