Medium severity4.3NVD Advisory· Published Jun 26, 2024· Updated Jun 17, 2026

CVE-2024-29953

Description

A vulnerability in the web interface in Brocade Fabric OS before v9.2.1, v9.2.0b, and v9.1.1d prints encoded session passwords on session storage for Virtual Fabric platforms. This could allow an authenticated user to view other users' session encoded passwords.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Broadcom Corporation/Fabric Operating System
cpe:2.3:o:broadcom:fabric_operating_system:*:*:*:*:*:*:*:*
Range: >=9.0.0,<9.1.1d
Brocade/Fabric OSllm-fuzzy2 versions
<9.2.1, <9.2.0b, <9.1.1d+ 1 more
- (no CPE)range: <9.2.1, <9.2.0b, <9.1.1d
- (no CPE)range: before v9.2.1, v9.2.0b, and v9.1.1d

Patches

Vulnerability mechanics

References

security.netapp.com/advisory/ntap-20240822-0009/nvdThird Party Advisory
support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/23227nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000