PT-2023-23317 · Brocade · Brocade Fabric Os

Published 2023-08-01 · Updated 2024-09-18 · CVE-2023-31429

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions prior to 9.1.1c, 9.2.0

Description The issue arises when using various commands such as chassisdistribute, reboot, rasman, errmoduleshow, errfilterset, hassiscfgperrthreshold, supportshowcfgdisable, and supportshowcfgenable that can cause the content of shell interpreted variables to be printed in the terminal.

Recommendations For Brocade Fabric OS versions prior to 9.1.1c, 9.2.0, update to version 9.1.1c or 9.2.0 to resolve the issue. As a temporary workaround, consider restricting the use of the vulnerable commands until a patch is available.

Fix

Generation of Error Message Containing Sensitive Information

Command Injection

Weakness Enumeration

CWE-209

CWE-77

Related Identifiers

CVE-2023-31429

Affected Products

Brocade Fabric Os

References · 7

• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/22408 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-31429 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-31429 · Security Note
• https://t.me/cvenotify/55812 · Telegram Post
• https://t.me/cvenotify/95169 · Telegram Post
• https://security.netapp.com/advisory/ntap-20230908-0007 · Note
• https://t.me/cibsecurity/67544 · Telegram Post