Skip to content
OpenAdvisories
Medium · 6.5 CVE-2022-28170 EUVD-2022-32624GHSA-73xq-c68f-h599

Brocade Fabric OS Web Application services before Brocade Fabric v9.1.0, v9.0.1e, v8.2.3c, v7.4.2j store server and user passwords in the d…

Published Oct 25, 2022 · Updated May 9, 2025 · Assigned by brocade

Description

Brocade Fabric OS Web Application services before Brocade Fabric v9.1.0, v9.0.1e, v8.2.3c, v7.4.2j store server and user passwords in the debug statements. This could allow a local user to extract the passwords from a debug file.

Affected products

VendorProductAffectedFixed
— Brocade Fabric OS Brocade Fabric OS versions before Brocade Fabric v9.1.0, v9.0.1e, v8.2.3c, v7.4.2j —

References