Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2024-29953

Encoded session passwords on session storage for Virtual Fabric platforms

Description

A vulnerability in the web interface in Brocade Fabric OS before v9.2.1, v9.2.0b, and v9.1.1d prints encoded session passwords on session storage for Virtual Fabric platforms. This could allow an authenticated user to view other users' session encoded passwords.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Brocade Fabric OS

Default version status: affected

  • before v9.2.1, v9.2.0b, and v9.1.1daffected

References