Log File Vulnerability in Brocade SANnav Exposes Configuration Secrets

CVE-2022-43933
4.4MEDIUM

Key Information

Vendor
Brocade
Status
Sannav
Vendor
CVE Published:
21 November 2024

Summary

An information exposure through log file vulnerability exists in Brocade SANnav before Brocade SANnav 2.2.2, where configuration secrets are logged in supportsave. Supportsave file is generated by an admin user troubleshooting the switch. The Logged information may include usernames and passwords, and secret keys.

Affected Version(s)

SANnav = before Brocade SANnav 2.2.2

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published.

  • Vulnerability Reserved.

Collectors

NVD DatabaseMitre Database
.