CVE-2024-29953: Broadcom Fabric Operating System

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

A vulnerability in the web interface in Brocade Fabric OS before v9.2.1, v9.2.0b, and v9.1.1d prints encoded session passwords on session storage for Virtual Fabric platforms. This could allow an authenticated user to view other users' session encoded passwords.

Affected products

• Broadcom Fabric Operating System: from 9.0.0, before 9.1.1d (fixed in 9.1.1d); from 9.2.0, before 9.2.0b (fixed in 9.2.0b)

Published 2024-06-26. Last modified 2026-06-17.