{"id":"CVE-2024-29953","aliases":["EUVD-2024-26927","GHSA-v6jg-w357-8m4v"],"status":"published","title":"Encoded session passwords on session storage for Virtual Fabric platforms","description":"A vulnerability in the web interface in Brocade Fabric OS before v9.2.1, v9.2.0b, and v9.1.1d prints encoded session passwords on session storage for Virtual Fabric platforms. \nThis could allow an authenticated user to view other users' session encoded passwords.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00299,"percentile":0.22806,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-922"],"published":"2024-06-25T23:16:48Z","modified":"2026-06-17T07:23:25Z","products":[{"vendor":"broadcom","product":"fabric_operating_system"},{"vendor":"brocade","product":"fabric os"}],"references":[{"url":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/23227","tags":["x_transferred","Vendor Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240822-0009/","tags":["Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-29953"},{"url":"https://security.netapp.com/advisory/ntap-20240822-0009"},{"url":"https://github.com/advisories/GHSA-v6jg-w357-8m4v"}],"sources":{"cve":[{"id":"CVE-2024-29953","title":"Encoded session passwords on session storage for Virtual Fabric platforms","description":"A vulnerability in the web interface in Brocade Fabric OS before v9.2.1, v9.2.0b, and v9.1.1d prints encoded session passwords on session storage for Virtual Fabric platforms. \nThis could allow an authenticated user to view other users' session encoded passwords.","status":"published","published":"2024-06-25T23:16:48.169Z","modified":"2024-08-22T18:03:11.06Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-922"],"updated_at":"2026-11-02T14:34:15.337999Z"}],"euvd":[{"id":"EUVD-2024-26927","description":"A vulnerability in the web interface in Brocade Fabric OS before v9.2.1, v9.2.0b, and v9.1.1d prints encoded session passwords on session storage for Virtual Fabric platforms. \nThis could allow an authenticated user to view other users' session encoded passwords.","status":"published","published":"2024-06-25T23:16:48Z","modified":"2024-08-22T18:03:11Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T00:56:13.216602Z"}],"ghsa":[{"id":"GHSA-v6jg-w357-8m4v","title":"A vulnerability in the web interface in Brocade Fabric OS before v9.2.1, v9.2.0b, and v9.1.1d...","description":"A vulnerability in the web interface in Brocade Fabric OS before v9.2.1, v9.2.0b, and v9.1.1d prints encoded session passwords on session storage for Virtual Fabric platforms. \nThis could allow an authenticated user to view other users' session encoded passwords.","status":"published","published":"2024-06-26T00:31:43Z","modified":"2025-02-04T15:32:40Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-922"],"updated_at":"2026-11-02T14:59:47.147393Z"}],"nvd":[{"id":"CVE-2024-29953","description":"A vulnerability in the web interface in Brocade Fabric OS before v9.2.1, v9.2.0b, and v9.1.1d prints encoded session passwords on session storage for Virtual Fabric platforms. \nThis could allow an authenticated user to view other users' session encoded passwords.","status":"published","published":"2024-06-26T00:15:10.03Z","modified":"2026-06-17T07:23:25.713Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-922"],"updated_at":"2026-11-02T14:10:09.388795Z"}]}}