Skip to content
OpenAdvisories
Medium WID-SEC-2024-1002 2 CVEs

Broadcom Fabric OS: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

Published May 1, 2024 · Updated Aug 22, 2024 · Revision 2 · de-DE

Vendor: Broadcom Product: Fabric OS

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Broadcom Fabric OS ausnutzen, um Informationen offenzulegen.

Product

Fabric OS (FOS) ist ein Betriebssystem für FibreChannel Switches.

Vulnerabilities 2

  • Medium 5.9
    CVE-2024-29954

    password management API prints sensitive information in log files

    A vulnerability in a password management API in Brocade Fabric OS versions before v9.2.1, v9.2.0b, v9.1.1d, and v8.2.3e prints sensitive information in log files. This could allow an authenticated user to view the server passwords for protocols such as scp an…

    Brocade Fabric OS
  • Medium 4.3
    CVE-2024-29953

    Encoded session passwords on session storage for Virtual Fabric platforms

    A vulnerability in the web interface in Brocade Fabric OS before v9.2.1, v9.2.0b, and v9.1.1d prints encoded session passwords on session storage for Virtual Fabric platforms. This could allow an authenticated user to view other users' session encoded passwor…

    Brocade Fabric OS

Revision history

  1. #2

    Neue Updates von NetApp aufgenommen

  2. #1

    Initiale Fassung

References