Vulnerability Details CVE-2024-29953
A vulnerability in the web interface in Brocade Fabric OS before v9.2.1, v9.2.0b, and v9.1.1d prints encoded session passwords on session storage for Virtual Fabric platforms.
This could allow an authenticated user to view other users' session encoded passwords.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 35.8%
CVSS Severity
CVSS v3 Score 4.3
References
Products affected by CVE-2024-29953
-
cpe:2.3:o:broadcom:fabric_operating_system:9.0.0
-
cpe:2.3:o:broadcom:fabric_operating_system:9.0.0a
-
cpe:2.3:o:broadcom:fabric_operating_system:9.0.0b
-
cpe:2.3:o:broadcom:fabric_operating_system:9.0.1
-
cpe:2.3:o:broadcom:fabric_operating_system:9.0.1a
-
cpe:2.3:o:broadcom:fabric_operating_system:9.1.0
-
cpe:2.3:o:broadcom:fabric_operating_system:9.1.1
-
cpe:2.3:o:broadcom:fabric_operating_system:9.1.1c
-
cpe:2.3:o:broadcom:fabric_operating_system:9.2.0
-
cpe:2.3:o:broadcom:fabric_operating_system:9.2.0a