{"id":"CVE-2023-31429","state":"PUBLISHED","title":"Multiple commands print sensitive information in the terminal","description":"Brocade Fabric OS before Brocade Fabric OS 9.1.1c, 9.2.0 contains a vulnerability when using various commands such as “chassisdistribute”, “reboot”, “rasman”, errmoduleshow, errfilterset, hassiscfgperrthreshold, supportshowcfgdisable and supportshowcfgenable commands that can cause the content of shell interpreted variables to be printed in the terminal.","publishedAt":"2023-08-01T20:20:52.128Z","updatedAt":"2024-10-15T14:12:35.099Z","severity":{"score":5.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","source":"brocade"},"assigner":"brocade","products":["Brocade Fabric OS"],"affected":[{"vendor":"Brocade","product":"Fabric OS","defaultStatus":"unaffected","versions":[{"version":"before Brocade Fabric OS v9.1.1c, v9.2.0","status":"affected"}]}],"references":["https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/22408","https://security.netapp.com/advisory/ntap-20230908-0007/"],"weaknesses":["CWE-209"],"ingestedAt":"2026-10-29T20:06:00.499Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/31xxx/CVE-2023-31429.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-31429","state":"PUBLISHED","datePublished":"2023-08-01T20:20:52.128Z","dateUpdated":"2024-10-15T14:12:35.099Z","assignerShortName":"brocade","assignerOrgId":"87b297d7-335e-4844-9551-11b97995a791","dateReserved":"2023-04-28T00:14:58.125Z"},"containers":{"cna":{"title":"Multiple commands print sensitive information in the terminal","descriptions":[{"lang":"en","value":"Brocade Fabric OS before Brocade Fabric OS 9.1.1c, 9.2.0 contains a vulnerability when using various commands such as “chassisdistribute”, “reboot”, “rasman”, errmoduleshow, errfilterset, hassiscfgperrthreshold, supportshowcfgdisable and supportshowcfgenable commands that can cause the content of shell interpreted variables to be printed in the terminal."}],"affected":[{"vendor":"Brocade","product":"Fabric OS","defaultStatus":"unaffected","versions":[{"version":"before Brocade Fabric OS v9.1.1c, v9.2.0","status":"affected"}]}],"references":[{"url":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/22408"},{"url":"https://security.netapp.com/advisory/ntap-20230908-0007/"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-209","description":"CWE-209 Generation of Error Message Containing Sensitive Information","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"brocade","orgId":"87b297d7-335e-4844-9551-11b97995a791","dateUpdated":"2024-09-18T21:53:45.190Z"},"impacts":[{"capecId":"CAPEC-155","descriptions":[{"lang":"en","value":"CAPEC-155: Screen Temporary Files for Sensitive Information"}]}],"source":{"discovery":"INTERNAL"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/22408","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20230908-0007/","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T14:53:30.864Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-10-15T14:08:06.655868Z","id":"CVE-2023-31429","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-10-15T14:12:35.099Z"}}]}}}