CVE-2020-15369

8.8 highEPSS 1.0%

High (8.8) in broadcom fabric operating system. EPSS 1.0% chance of exploitation in the next 30 days.

Supportlink CLI in Brocade Fabric OS Versions v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c does not obfuscate the password field, which could expose users’ credentials of the remote server. An authenticated user could obtain the exposed password credentials to gain access to the remote host.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
CWE: CWE-521
Published: 2020-09-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

broadcom:fabric_operating_system

References

https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2020-1078
https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2020-1078

Check your stack JSON