The Brocade Fabric OS Commands “configupload” and “configdownload” before Brocade Fabric OS v9.1.1c, v8.2.3d, v9.2.0 print scp, sftp, ftp servers passwords in supportsave. This could allow a remote authenticated attacker to access sensitive information.
References
| Link | Resource |
|---|---|
| https://security.netapp.com/advisory/ntap-20230908-0007/ | Third Party Advisory |
| https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/22377 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
15 Feb 2024, 19:52
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://security.netapp.com/advisory/ntap-20230908-0007/ - Third Party Advisory | |
| References | () https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/22377 - Vendor Advisory |
13 Feb 2024, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
08 Sep 2023, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
04 Aug 2023, 17:20
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://support.broadcom.com/external/content/SecurityAdvisories/0/22407 - Not Applicable | |
| CPE | cpe:2.3:o:broadcom:fabric_operating_system:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| First Time |
Broadcom
Broadcom fabric Operating System |
|
| CWE | CWE-532 |
01 Aug 2023, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-08-01 22:15
Updated : 2024-02-28 20:33
NVD link : CVE-2023-31426
Mitre link : CVE-2023-31426
CVE.ORG link : CVE-2023-31426
JSON object : View
Products Affected
broadcom
- fabric_operating_system
CWE
CWE-532
Insertion of Sensitive Information into Log File