CVE-2022-28170

—

CVSS 3.1

6.5 medium

EPSS

<1%p12

Published

Oct 25, 2022 (Oct 25, 2022)

Modified

Jun 17, 2026

Description

Brocade Fabric OS Web Application services before Brocade Fabric v9.1.0, v9.0.1e, v8.2.3c, v7.4.2j store server and user passwords in the debug statements. This could allow a local user to extract the passwords from a debug file.

Vendors: broadcom
Products: fabric operating system
Weakness: CWE-922
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.