Medium severity6.5NVD Advisory· Published Oct 25, 2022· Updated Jun 17, 2026

CVE-2022-28170

Description

Brocade Fabric OS Web Application services before Brocade Fabric v9.1.0, v9.0.1e, v8.2.3c, v7.4.2j store server and user passwords in the debug statements. This could allow a local user to extract the passwords from a debug file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Broadcom Corporation/Fabric Operating System2 versions
cpe:2.3:o:broadcom:fabric_operating_system:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:broadcom:fabric_operating_system:*:*:*:*:*:*:*:*range: <7.4.2j
- cpe:2.3:o:broadcom:fabric_operating_system:9.1.0:*:*:*:*:*:*:*
Brocade/Fabric OS Web Application servicesdescription
Brocade/Fabric OSllm-fuzzy
Range: <9.1.0, <9.0.1e, <8.2.3c, <7.4.2j

Patches

Vulnerability mechanics

References

security.netapp.com/advisory/ntap-20230127-0002/nvdThird Party Advisory
www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2076nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000