Multiple commands print sensitive information in the terminal (Brocade Fabric OS)
En bref
- Source
- NVD
- EPSS
- EPSS 0.22 % · centile 12 ()
- Ătat
- PUBLISHED
- Publiée
- Mise Ă jour
- Attribuée par
- brocade
- Statut NVD
- Modified
Description
Brocade Fabric OS before Brocade Fabric OS 9.1.1c, 9.2.0 contains a vulnerability when using various commands such as âchassisdistributeâ, ârebootâ, ârasmanâ, errmoduleshow, errfilterset, hassiscfgperrthreshold, supportshowcfgdisable and supportshowcfgenable commands that can cause the content of shell interpreted variables to be printed in the terminal.
Faiblesses (CWE)
Références
Scores
| Version | Score | Vecteur | ĂvaluĂ© par |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | brocade |
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | NVD · sirt@brocade.com (Secondary) |
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2023-35737
- GCVE · GCVE-0-2023-31429
Avis du CERT-FR
- CERTFR-2023-AVI-0727 â Multiples vulnĂ©rabilitĂ©s dans les produits NetApp · cert.ssi.gouv.fr
Configurations affectées (CPE NVD)
cpe:2.3:o:broadcom:fabric_operating_system:*:*:*:*:*:*:*:*< 9.1.1c
Produits affectés
| Produit | Versions |
|---|---|
| Brocade · Fabric OS | affected before Brocade Fabric OS v9.1.1c, v9.2.0 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST â attribution requested |
| ENISA EUVD | ENISA â reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain â this product uses data from the NVD API but is not endorsed or certified by the NVD |