Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2023-31426

scp, sftp, ftp servers passwords in supportsave

Description

The Brocade Fabric OS Commands “configupload” and “configdownload” before Brocade Fabric OS v9.1.1c, v8.2.3d, v9.2.0 print scp, sftp, ftp servers passwords in supportsave. This could allow a remote authenticated attacker to access sensitive information.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Brocade Brocade Fabric OS

Default version status: unaffected

  • before Brocade Fabric OS v9.1.1c, v8.2.3d, v9.2.0affected

References