CVE-2020-15369
Last modified
CVE-2020-15369 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. Supportlink CLI in Brocade Fabric OS Versions v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c does not obfuscate the password field, which could expose users’ credentials of the remote server. An authenticated user could obtain the exposed password credentials to gain access to the remote host.. EPSS estimates a 1.00% chance of exploitation in the next 30 days.
Description
Supportlink CLI in Brocade Fabric OS Versions v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c does not obfuscate the password field, which could expose users’ credentials of the remote server. An authenticated user could obtain the exposed password credentials to gain access to the remote host.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Broadcom | Fabric Operating System | 8.2.1 |
| Broadcom | Fabric Operating System | 8.2.1a |
| Broadcom | Fabric Operating System | 8.2.1b |
| Broadcom | Fabric Operating System | 8.2.1c |
| Broadcom | Fabric Operating System | 8.2.1d |
| Broadcom | Fabric Operating System | 8.2.2 |
| Broadcom | Fabric Operating System | 8.2.2a |
| Broadcom | Fabric Operating System | 8.2.2a1 |
| Broadcom | Fabric Operating System | 8.2.2b |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-15369?
How severe is CVE-2020-15369?
How do I fix CVE-2020-15369?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-15363The Nexos theme through 1.7 for WordPress allows side-map/?s…9.8
- CVE-2020-15364The Nexos theme through 1.7 for WordPress allows top-map/?se…6.1
- CVE-2020-15365LibRaw before 0.20-Beta3 has an out-of-bounds write in parse…6.5
- CVE-2020-15366An issue was discovered in ajv.validate() in Ajv (aka Anothe…5.6
- CVE-2020-15367Venki Supravizio BPM 10.1.2 does not limit the number of aut…9.8
- CVE-2020-15368AsrDrv103.sys in the ASRock RGB Driver does not properly res…5.5
- CVE-2020-1537An elevation of privilege vulnerability exists when the Wind…7.8
- CVE-2020-15370Brocade Fabric OS versions before Brocade Fabric OS v7.4.2g …6.5
- CVE-2020-15371Brocade Fabric OS versions before Brocade Fabric OS v9.0.0, …9.8
- CVE-2020-15372A vulnerability in the command-line interface in Brocade Fab…5.5
- CVE-2020-15373Multiple buffer overflow vulnerabilities in REST API in Broc…9.8
- CVE-2020-15374Rest API in Brocade Fabric OS v8.2.1 through v8.2.1d, and 8.…9.8
Are you affected by CVE-2020-15369?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST