CVE-2022-28170

2022-10-2500:00:00

brocade

www.cve.org

brocade fabric os

web application

passwords

debug statements

EPSS

Percentile

5.1%

JSON

Brocade Fabric OS Web Application services before Brocade Fabric v9.1.0, v9.0.1e, v8.2.3c, v7.4.2j store server and user passwords in the debug statements. This could allow a local user to extract the passwords from a debug file.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Brocade Fabric OS",
    "versions": [
      {
        "version": "Brocade Fabric OS versions before Brocade Fabric v9.1.0, v9.0.1e, v8.2.3c, v7.4.2j",
        "status": "affected"
      }
    ]
  }
]