VULNERABILITY INTELLIGENCE
CVE-2020-15369
CVSS score8.8 HIGH
EPSS probability1.00%
CISA KEVNot currently listed
Published2020-09-25
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
Supportlink CLI in Brocade Fabric OS Versions v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c does not obfuscate the password field, which could expose users’ credentials of the remote server. An authenticated user could obtain the exposed password credentials to gain access to the remote host.
Weakness classification
- nvd@nist.gov: CWE-521
Primary references
- sirt@brocade.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory