Design/Logic Flaw

The firmwaredownload command on Brocade Fabric OS v9.2.0 could log the FTP/SFTP/SCP server password in clear text in the SupportSave file when performing a downgrade from Fabric OS v9.2.0 to any earlier version of Fabric OS...

CVE-2023-4162 Segmentation fault in Brocade Fabric OS after Brocade Fabric OS v9.0

A segmentation fault can occur in Brocade Fabric OS after Brocade Fabric OS v9.0 and before Brocade Fabric OS v9.2.0a through the passwdcfg command. This could allow an authenticated privileged user local user to crash a Brocade Fabric OS swith using the cli “passwdcfg --set -expire -minDiff“...

CVE-2023-4162 Segmentation fault in Brocade Fabric OS after Brocade Fabric OS v9.0

A segmentation fault can occur in Brocade Fabric OS after Brocade Fabric OS v9.0 and before Brocade Fabric OS v9.2.0a through the passwdcfg command. This could allow an authenticated privileged user local user to crash a Brocade Fabric OS swith using the cli “passwdcfg --set -expire -minDiff“...

CVE-2023-4162

CVE-2023-4162 describes a segmentation fault in Brocade Fabric OS (FOS) affecting versions v9.0 through before v9.2.0a, triggered via the CLI command passwdcfg --set -expire -minDiff. The vulnerability could allow an authenticated, privileged local user to crash a Brocade Fabric OS switch, potent...

CVE-2023-4163

CVE-2023-4163 : In Brocade Fabric OS before v9.2.0a, a locally authenticated privileged user can trigger a buffer overflow in the portcfgfportbuffers command, leading to a kernel panic due to large input buffers. This is confirmed by multiple sources in the connected documents (NVD entry, Red Hat...

CVE-2023-4163 Possible buffer overflow in portcfgfportbuffers in Brocade Fabric OS

In Brocade Fabric OS before v9.2.0a, a local authenticated privileged user can trigger a buffer overflow condition, leading to a kernel panic with large input to buffers in the portcfgfportbuffers command...

CVE-2023-4163 Possible buffer overflow in portcfgfportbuffers in Brocade Fabric OS

In Brocade Fabric OS before v9.2.0a, a local authenticated privileged user can trigger a buffer overflow condition, leading to a kernel panic with large input to buffers in the portcfgfportbuffers command...

Brocade Fabric OS 资源管理错误漏洞

Brocade Fabric OS FOS is a set of embedded operating systems used in devices such as switches and routers from Brocade USA. A security vulnerability exists in Brocade Fabric OS versions v9.0 through v9.2.0a, which originates from a possible segmentation fault in Brocade Fabric OS that allows an...

PT-2023-23525 · Brocade · Brocade Sannav

Name of the Vulnerable Software and Affected Versions: Brocade SANnav versions prior to 2.3.0 Brocade SANnav version 2.2.2a Description: The issue allows a privileged user to retrieve SNMPv3 Authentication passwords stored in plaintext, given knowledge and access to log files. This could occur wh...

Brocade Fabric OS 安全漏洞

Brocade Fabric OS FOS is a set of embedded operating systems used in devices such as switches and routers from Brocade USA. A security vulnerability exists in Brocade Fabric OS versions prior to v9.2.0a, which stems from the possibility that a locally authenticated, privileged user could trigger ...

Broadcom Brocade SANnav 安全漏洞

Broadcom Brocade SANnav is a suite of SAN management platforms from Broadcom Corporation USA. A security vulnerability exists in Brocade SANnav versions prior to v2.3.0 and v2.2.2a, which originated in the Brocade SANnav web interface that allows unauthenticated remote users to bypass web...

Broadcom Brocade SANnav 安全漏洞

Broadcom Brocade SANnav is a suite of SAN management platforms from Broadcom USA. A security vulnerability exists in Brocade SANnav versions prior to v2.3.0 and v2.2.2a, which stems from a Brocade SANnav log file that could lead to information disclosure, where sensitive fields are recorded in...

PT-2023-23312 · Brocade · Brocade Sannav

Name of the Vulnerable Software and Affected Versions: Brocade SANnav versions prior to 2.3.0 Brocade SANnav version 2.2.2 and earlier, excluding 2.2.2a Description: The issue allows remote unauthenticated users to bypass web authentication and authorization. Recommendations: For Brocade SANnav...

CVE-2023-3489 firmwaredownload command could log servers passwords in clear text

The firmwaredownload command on Brocade Fabric OS v9.2.0 could log the FTP/SFTP/SCP server password in clear text in the SupportSave file when performing a downgrade from Fabric OS v9.2.0 to any earlier version of Fabric OS...

CVE-2023-3489 firmwaredownload command could log servers passwords in clear text

The firmwaredownload command on Brocade Fabric OS v9.2.0 could log the FTP/SFTP/SCP server password in clear text in the SupportSave file when performing a downgrade from Fabric OS v9.2.0 to any earlier version of Fabric OS...

CVE-2023-3489

The vulnerability CVE-2023-3489 affects Brocade Fabric OS (Firmwaredownload command) and occurs when downgrading from v9.2.0 to earlier versions . The issue is that the command can log the FTP/SFTP/SCP server password in clear text in the SupportSave file, exposing credentials. This behavior is d...

PT-2023-25047 · Brocade · Brocade Fabric Os

Name of the Vulnerable Software and Affected Versions: Brocade Fabric OS version 9.2.0 Brocade Fabric OS versions prior to 9.2.0 Description: The firmwaredownload command on Brocade Fabric OS could log the FTP/SFTP/SCP server password in clear text in the SupportSave file when performing a...

Brocade Fabric OS 安全漏洞

Brocade Fabric OS FOS is a set of embedded operating systems used in devices such as switches and routers from Brocade USA. A security vulnerability exists in Brocade Fabric OS version v9.2.0, which stems from the fact that when performing a downgrade from Fabric OS v9.2.0 to any earlier version ...

A remote attacker can supply specially crafted transfer-encoding chunks to Eclipse Jetty that may bypass the authorization checks of an intermediary caching proxy.

In Eclipse Jetty, versions 9.2.x and older, 9.3.x all configurations, and 9.4.x non-default configuration with RFC2616 compliance enabled, transfer-encoding chunks are handled poorly. The chunk length parsing was vulnerable to an integer overflow. Thus a large chunk size could be interpreted as a...

CVE-2023-4162 - Segmentation fault in Brocade Fabric OS after Brocade Fabric OS v9.0

A segmentation fault can occur in Brocade Fabric OS after Brocade Fabric OS v9.0 and before Brocade Fabric OS v9.2.0a through the passwdcfg command. This could allow an authenticated privileged user local user to crash a Brocade Fabric OS swith using the cli “passwdcfg --set -expire -minDiff“...