CVE-2024-10403

MEDIUM Year: 2024
CVSS v3 Score
7.5
High
Weakness Type
CWE-528
View all →

Vulnerability Description

Brocade Fabric OS versions before 8.2.3e2, versions 9.0.0 through 9.2.0c, and 9.2.1 through 9.2.1a can capture the SFTP/FTP server password used for a firmware download operation initiated by SANnav or through WebEM in a weblinker core dump that is later captured via supportsave.

Related Vulnerabilities

CVE-2025-48928

MEDIUM
CVSS:4.0(Medium)

The TeleMessage service through 2025-05-05 is based on a JSP application in which the heap content is roughly equivalent to a "core dump" in which a password previously sent over HTTP would be include...

CWE-5282025