Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2024-10403

SFTP/FTP password could be captured in plain text in Supportsave generated from SANnav

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
brocade

Description

Brocade Fabric OS versions before 8.2.3e2, versions 9.0.0 through 9.2.0c, and 9.2.1 through 9.2.1a can capture the SFTP/FTP server password used for a firmware download operation initiated by SANnav or through WebEM in a weblinker core dump that is later captured via supportsave.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Brocade Fabric OS

Default version status: unaffected

  • Brocade Fabric OS versions before 8.2.3e2, versions 9.0.0 through 9.2.0c, and 9.2.1 through 9.2.1aaffected

References