CVE-2020-15369: High severity broadcom fabric operating system vulnerability

Published Sep 25, 2020

Updated

Supportlink CLI in Brocade Fabric OS Versions v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c does not obfuscate the password field, which could expose users’ credentials of the remote server. An authenticated user could obtain the exposed password credentials to gain access to the remote host.

Affected Software

9 affected components

Broadcom Fabric Operating System=8.2.1

Broadcom Fabric Operating System=8.2.1a

Broadcom Fabric Operating System=8.2.1b

Broadcom Fabric Operating System=8.2.1c

Broadcom Fabric Operating System=8.2.1d

Broadcom Fabric Operating System=8.2.2

Broadcom Fabric Operating System=8.2.2a

Broadcom Fabric Operating System=8.2.2a1

Broadcom Fabric Operating System=8.2.2b

Event History

Sep 25, 2020

CVE Published

via MITRE·01:08 PM

Data Sourced

via MITRE·01:08 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2020-15369?

CVE-2020-15369 is a vulnerability in the Supportlink CLI of Brocade Fabric OS versions v8.2.1 through v8.2.1d and 8.2.2 versions before v8.2.2c.

How does CVE-2020-15369 affect users?

CVE-2020-15369 exposes users' credentials of the remote server, potentially allowing unauthorized access.

What is the severity of CVE-2020-15369?

CVE-2020-15369 has a severity rating of 8.8, which is considered high.

Which software versions are affected by CVE-2020-15369?

Brocade Fabric OS versions v8.2.1 through v8.2.1d and 8.2.2 versions before v8.2.2c are affected by CVE-2020-15369.

How can I mitigate CVE-2020-15369?

To mitigate CVE-2020-15369, it is recommended to upgrade to Brocade Fabric OS version v8.2.1e or v8.2.2c.