Weakness in Password-Based Encryption in Brocade SANnav

CVE-2019-16208

What is CVE-2019-16208?

The Brocade SANnav software prior to version 2.0 has a vulnerability in its password-based encryption mechanism. This flaw allows potential attackers to exploit weaknesses in the generation of cryptographic keys used for securing passwords associated with various services, including Radius and TACACS. If exploited, this vulnerability could compromise the confidentiality of sensitive user credentials, leading to unauthorized access to critical network resources.

References