Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2023-3489

firmwaredownload command could log servers passwords in clear text

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
brocade

Description

The firmwaredownload command on Brocade Fabric OS v9.2.0 could log the FTP/SFTP/SCP server password in clear text in the SupportSave file when performing a downgrade from Fabric OS v9.2.0 to any earlier version of Fabric OS.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Brocade Fabric OS

Default version status: unaffected

  • Brocade Fabric OS v9.2.0affected

References