6.8
CVE-2023-31426
- EPSS 0.16%
- Published 01.08.2023 22:15:13
- Last modified 21.11.2024 08:01:50
- Source sirt@brocade.com
- Teams watchlist Login
- Open Login
The Brocade Fabric OS Commands “configupload” and “configdownload” before Brocade Fabric OS v9.1.1c, v8.2.3d, v9.2.0 print scp, sftp, ftp servers passwords in supportsave. This could allow a remote authenticated attacker to access sensitive information.
Data is provided by the National Vulnerability Database (NVD)
Broadcom ≫ Fabric Operating System Version < 8.2.3d
Broadcom ≫ Fabric Operating System Version >= 9.0.0 < 9.1.1c
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.16% | 0.377 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 6.5 | 2.8 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
|
| sirt@brocade.com | 6.8 | 2.3 | 4 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N
|
CWE-532 Insertion of Sensitive Information into Log File
The product writes sensitive information to a log file.