CVE Vulnerabilities

CVE-2019-16204

Insertion of Sensitive Information into Log File

Published: Feb 05, 2020 | Modified: Nov 21, 2024
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

Brocade Fabric OS Versions before v7.4.2f, v8.2.2a, v8.1.2j and v8.2.1d could expose external passwords, common secrets or authentication keys used between the switch and an external server.

Weakness

The product writes sensitive information to a log file.

Affected Software

Name Vendor Start Version End Version
Fabric_operating_system Broadcom * 7.4.2f (excluding)
Fabric_operating_system Broadcom 8.1.2 (including) 8.1.2j (excluding)
Fabric_operating_system Broadcom 8.2.1 (including) 8.2.1d (excluding)
Fabric_operating_system Broadcom 8.2.2 (including) 8.2.2a (excluding)

Potential Mitigations

References