CVE-2023-31429 MEDIUM

CVE-2023-31429: Multiple commands print sensitive information in the terminal

Vendor Brocade
Product Fabric OS
Weakness CWE-209 · Error message info leak
Published August 1, 2023
Last update October 15, 2024
View on NVD All CVEs

CVSS base score

5.5/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

Brocade Fabric OS before Brocade Fabric OS 9.1.1c, 9.2.0 contains a vulnerability when using various commands such as “chassisdistribute”, “reboot”, “rasman”, errmoduleshow, errfilterset, hassiscfgperrthreshold, supportshowcfgdisable and supportshowcfgenable commands that can cause the content of shell interpreted variables to be printed in the terminal.

Key dates

02Disclosure timeline

August 1, 2023 CVE published
October 15, 2024 Record updated