CVE-2024-29953CWE-922

Encoded session passwords on session storage for Virtual Fabric platforms

Medium · published June 25, 2024

CVSS v3.1
4.3
EPSS
0%
Percentile
21.4
In the wild
Unconfirmed
What it is

A vulnerability in the web interface in Brocade Fabric OS before v9.2.1, v9.2.0b, and v9.1.1d prints encoded session passwords on session storage for Virtual Fabric platforms.

This could allow an authenticated user to view other users' session encoded passwords.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00299 · 21.4th percentile
Weakness
CWE-922 · Insecure Storage of Sensitive Information
Published
2024-06-25T23:16Z
EPSS history
Timeline
  • 25 JUN 23:16Z
    Encoded session passwords on session storage for Virtual Fabric platforms
    cvelistv5