CVE-2024-29953

CWE-9223 documents3 sources
Severity
4.3MEDIUM
EPSS
0.4%
top 41.40%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Broadcom Fabric Operating SystemBrocade Fabric OS
Timeline
PublishedJun 26

Description

A vulnerability in the web interface in Brocade Fabric OS before v9.2.1, v9.2.0b, and v9.1.1d prints encoded session passwords on session storage for Virtual Fabric platforms. This could allow an authenticated user to view other users' session encoded passwords.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5brocade/fabric_osbefore v9.2.1, v9.2.0b, and v9.1.1d
▶NVDbroadcom/fabric_operating_system9.0.0 — 9.1.1d+1

🔴Vulnerability Details

2
GHSA
GHSA-v6jg-w357-8m4v: A vulnerability in the web interface in Brocade Fabric OS before v9↗2024-06-26
▶
CVEList
Encoded session passwords on session storage for Virtual Fabric platforms↗2024-06-25
▶
CVE-2024-29953 (MEDIUM CVSS 4.3) | A vulnerability in the web interfac | cvebase.io