First published: Fri Sep 25 2020(Updated: )
Brocade Fabric OS versions before Brocade Fabric OS v7.4.2g could allow an authenticated, remote attacker to view a user password in cleartext. The vulnerability is due to incorrectly logging the user password in log files.
Credit: sirt@brocade.com
Affected Software | Affected Version | How to fix |
---|---|---|
Broadcom Fabric Operating System | <7.4.2g |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID is CVE-2020-15370.
The vulnerability affects Brocade Fabric OS versions before Brocade Fabric OS v7.4.2g.
The severity of CVE-2020-15370 is medium with a CVSS score of 6.5.
An attacker can exploit CVE-2020-15370 by logging in as an authenticated user and viewing the user password in cleartext.
To fix CVE-2020-15370, upgrade to Brocade Fabric OS v7.4.2g or later.