CVE-2024-10403: SFTP/FTP password could be captured in plain text in Supportsave generated from SANnav
Brocade Fabric OS versions before 8.2.3e2, versions 9.0.0 through 9.2.0c, and 9.2.1 through 9.2.1a can capture the SFTP/FTP server password used for a firmware download operation initiated by SANnav or through WebEM in a weblinker core dump that is later captured via supportsave.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-10403?
CVE-2024-10403 is classified as a high-severity vulnerability due to the risk of sensitive information disclosure.
How do I fix CVE-2024-10403?
To mitigate CVE-2024-10403, upgrade Brocade Fabric OS to version 8.2.3e2 or later, or ensure that versions 9.2.1a or higher are deployed.
What does CVE-2024-10403 affect?
CVE-2024-10403 affects Brocade Fabric OS versions prior to 8.2.3e2 and certain versions within the 9.x series.
What types of data are compromised in CVE-2024-10403?
CVE-2024-10403 can potentially expose SFTP/FTP server passwords used during firmware download operations.
How can I determine if my system is vulnerable to CVE-2024-10403?
Check the version of Brocade Fabric OS running on your system and compare it against the affected versions listed for CVE-2024-10403.