CVE-2022-28170: Broadcom Fabric Operating System

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Brocade Fabric OS Web Application services before Brocade Fabric v9.1.0, v9.0.1e, v8.2.3c, v7.4.2j store server and user passwords in the debug statements. This could allow a local user to extract the passwords from a debug file.

Affected products

• Broadcom Fabric Operating System: before 7.4.2j (fixed in 7.4.2j); from 8.0.0, before 8.2.3c (fixed in 8.2.3c); from 9.0.0, before 9.0.1e (fixed in 9.0.1e); version 9.1.0 only

Published 2022-10-25. Last modified 2026-06-17.