VULNERABILITY INTELLIGENCE

CVE-2024-29953

CVSS score4.3 MEDIUM
EPSS probability0.30%
CISA KEVNot currently listed
Published2024-06-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

A vulnerability in the web interface in Brocade Fabric OS before v9.2.1, v9.2.0b, and v9.1.1d prints encoded session passwords on session storage for Virtual Fabric platforms. This could allow an authenticated user to view other users' session encoded passwords.

Weakness classification

  • sirt@brocade.com: CWE-922
  • nvd@nist.gov: CWE-922

Primary references