Vulnerability · Published Sep 25, 2020 · Assigned by brocade

CVE-2020-15369

High 8.8

In plain English

A high-severity security flaw in Brocade Fabric OS. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 63% of all known vulnerabilities).

Severity (CVSS NVD)8.8High
Exploit odds (30 days)1.0%top 37.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

Supportlink CLI in Brocade Fabric OS Versions v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c does not obfuscate the password field, which could expose users’ credentials of the remote server. An authenticated user could obtain the exposed password credentials to gain access to the remote host.

Affected products (as reported)

VendorProductVersions
n/a Brocade Fabric OS Brocade Fabric OS Versions v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c

References