CVE-2024-10403 — SFTP/FTP password could be captured in plain text in Supportsave generated from SANnav

CVE-2024-10403

SFTP/FTP password could be captured in plain text in Supportsave generated from SANnav PUBLISHED

Description (CNA)

Brocade Fabric OS versions before 8.2.3e2, versions 9.0.0 through 9.2.0c, and 9.2.1 through 9.2.1a can capture the SFTP/FTP server password used for a firmware download operation initiated by SANnav or through WebEM in a weblinker core dump that is later captured via supportsave.

Affected (CNA)

Vendor / product	Versions
Brocade / Fabric OS	affected Brocade Fabric OS versions before 8.2.3e2, versions 9.0.0 through 9.2.0c, and 9.2.1 through 9.2.1a

CWE

CWE-528

References

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25145

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.