Skip to content
OpenAdvisories
Medium · 4.3 CVE-2024-29953 EUVD-2024-26927GHSA-v6jg-w357-8m4v

Encoded session passwords on session storage for Virtual Fabric platforms

Published Jun 25, 2024 · Updated Aug 22, 2024 · Assigned by brocade

Description

A vulnerability in the web interface in Brocade Fabric OS before v9.2.1, v9.2.0b, and v9.1.1d prints encoded session passwords on session storage for Virtual Fabric platforms.
This could allow an authenticated user to view other users' session encoded passwords.

Affected products

VendorProductAffectedFixed
Brocade Fabric OS before v9.2.1, v9.2.0b, and v9.1.1d —

Advisories 1

References