Brocade Fabric OS Web Application services before Brocade Fabric v9.1.0, v9.0.1e, v8.2.3c, v7.4.2j store server and user passwords in the debug statements. This could allow a local user to extract the passwords from a debug file.
| Software | From | Fixed in |
|---|---|---|
| broadcom / fabric_operating_system | - | 7.4.2j |
| broadcom / fabric_operating_system | 8.0.0 | 8.2.3c |
| broadcom / fabric_operating_system | 9.0.0 | 9.0.1e |
| broadcom / fabric_operating_system | 9.1.0 | 9.1.0.x |