CVE-2023-31426

Опубликовано: 01 авг. 2023

Источник: nvd

CVSS3: 6.8

CVSS3: 6.5

EPSS Низкий

Описание

The Brocade Fabric OS Commands “configupload” and “configdownload” before Brocade Fabric OS v9.1.1c, v8.2.3d, v9.2.0 print scp, sftp, ftp servers passwords in supportsave. This could allow a remote authenticated attacker to access sensitive information.

Ссылки

https://security.netapp.com/advisory/ntap-20230908-0007/
Third Party Advisory
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/22377
Vendor Advisory
https://security.netapp.com/advisory/ntap-20230908-0007/
Third Party Advisory
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/22377
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:broadcom:fabric_operating_system:*:*:*:*:*:*:*:*

Версия до 8.2.3d (исключая)

cpe:2.3:o:broadcom:fabric_operating_system:*:*:*:*:*:*:*:*

Версия от 9.0.0 (включая) до 9.1.1c (исключая)

EPSS

Процентиль: 37%

0.00159

Низкий

6.8 Medium

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-532

Связанные уязвимости

GHSA-g732-pffp-45rc

CVSS3: 6.8

github

больше 2 лет назад

EPSS

Процентиль: 37%

0.00159

Низкий

6.8 Medium

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-532