Skip to content
OpenAdvisories
High · 8.6 CVE-2023-3489 EUVD-2023-44148GHSA-qw3m-jfhw-49pg

firmwaredownload command could log servers passwords in clear text

Published Aug 30, 2023 · Updated Feb 13, 2025 · Assigned by brocade

Description

The
firmwaredownload command on Brocade Fabric OS v9.2.0 could log the
FTP/SFTP/SCP server password in clear text in the SupportSave file when
performing a downgrade from Fabric OS v9.2.0 to any earlier version of
Fabric OS.

Affected products

VendorProductAffectedFixed
Brocade Fabric OS Brocade Fabric OS v9.2.0 —

Advisories 1

References