CVE-2025-7397 — CLI history displays inline passwords

CVE-2025-7397

CLI history displays inline passwords PUBLISHED

Description (CNA)

A vulnerability in the ascgshell, of Brocade ASCG before 3.3.0 stores any command executed in the Command Line Interface (CLI) in plain text within the command history. A local authenticated user that can access sensitive information like passwords within the CLI history leading to unauthorized access and potential data breaches.

Affected (CNA)

Vendor / product	Versions
Broadcom / Brocade ASCG	affected before 3.3.0

CWE

CWE-312

References

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/35949

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.