Description (CNA)
The firmwaredownload command on Brocade Fabric OS v9.2.0 could log the FTP/SFTP/SCP server password in clear text in the SupportSave file when performing a downgrade from Fabric OS v9.2.0 to any earlier version of Fabric OS.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Brocade / Fabric OS | affected Brocade Fabric OS v9.2.0 |
CWE
CWE-312
References
- https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/22510
- https://security.netapp.com/advisory/ntap-20231124-0003/
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.