CVEvulnerability

CVE-2020-15369

8.8 HIGH Published 2020-09-25 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-09-25
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
Weaknesses
CWE-521

Description

Supportlink CLI in Brocade Fabric OS Versions v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c does not obfuscate the password field, which could expose users’ credentials of the remote server. An authenticated user could obtain the exposed password credentials to gain access to the remote host.

Affected configurations

• broadcom fabric operating system 8.2.1 • broadcom fabric operating system 8.2.1a • broadcom fabric operating system 8.2.1b • broadcom fabric operating system 8.2.1c • broadcom fabric operating system 8.2.1d • broadcom fabric operating system 8.2.2 • broadcom fabric operating system 8.2.2a • broadcom fabric operating system 8.2.2a1 • broadcom fabric operating system 8.2.2b

Related

Weakness · CWE (1)

  • CWE-521 Weak Password Requirements weakness

References