CVE-2023-3489

CVSS V2 None CVSS V3 None
Description
The firmwaredownload command on Brocade Fabric OS v9.2.0 could log the FTP/SFTP/SCP server password in clear text in the SupportSave file when performing a downgrade from Fabric OS v9.2.0 to any earlier version of Fabric OS.
Overview
  • CVE ID
  • CVE-2023-3489
  • Assigner
  • brocade
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2023-08-30T23:56:07.070Z
  • Last Modified Date
  • 2023-08-30T23:56:18.010Z
Weakness Enumerations
CWE URL
CWE-312 http://cwe.mitre.org/data/definitions/312.html
References
Reference URL Reference Tags
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/22510
https://security.netapp.com/advisory/ntap-20231124-0003/
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-3489
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3489
History
Created Old Value New Value Data Type Notes
2024-06-24 20:50:07 Added to TrackCVE