Brocade Fabric OS Versions before v7.4.2f, v8.2.2a, v8.1.2j and v8.2.1d could expose external passwords, common secrets or authentication keys used between the switch and an external server.
Weakness
The product writes sensitive information to a log file.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Fabric_operating_system | Broadcom | * | 7.4.2f (excluding) |
| Fabric_operating_system | Broadcom | 8.1.2 (including) | 8.1.2j (excluding) |
| Fabric_operating_system | Broadcom | 8.2.1 (including) | 8.2.1d (excluding) |
| Fabric_operating_system | Broadcom | 8.2.2 (including) | 8.2.2a (excluding) |
Potential Mitigations
Related Attack Patterns
References
- https://security.netapp.com/advisory/ntap-20200511-0007/
- https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2020-905
- https://security.netapp.com/advisory/ntap-20200511-0007/
- https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2020-905