First published: Fri Sep 25 2020(Updated: )
Supportlink CLI in Brocade Fabric OS Versions v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c does not obfuscate the password field, which could expose users’ credentials of the remote server. An authenticated user could obtain the exposed password credentials to gain access to the remote host.
Credit: sirt@brocade.com
Affected Software | Affected Version | How to fix |
---|---|---|
Broadcom Fabric Operating System | =8.2.1 | |
Broadcom Fabric Operating System | =8.2.1a | |
Broadcom Fabric Operating System | =8.2.1b | |
Broadcom Fabric Operating System | =8.2.1c | |
Broadcom Fabric Operating System | =8.2.1d | |
Broadcom Fabric Operating System | =8.2.2 | |
Broadcom Fabric Operating System | =8.2.2a | |
Broadcom Fabric Operating System | =8.2.2a1 | |
Broadcom Fabric Operating System | =8.2.2b |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2020-15369 is a vulnerability in the Supportlink CLI of Brocade Fabric OS versions v8.2.1 through v8.2.1d and 8.2.2 versions before v8.2.2c.
CVE-2020-15369 exposes users' credentials of the remote server, potentially allowing unauthorized access.
CVE-2020-15369 has a severity rating of 8.8, which is considered high.
Brocade Fabric OS versions v8.2.1 through v8.2.1d and 8.2.2 versions before v8.2.2c are affected by CVE-2020-15369.
To mitigate CVE-2020-15369, it is recommended to upgrade to Brocade Fabric OS version v8.2.1e or v8.2.2c.