Brocade SANnav Log File Vulnerability Exposes Fabric OS Switch Passwords and Authorization IDs

CVE-2022-43935

What is CVE-2022-43935?

A significant vulnerability in Brocade SANnav allows unauthorized access to sensitive information through log file outputs. Specifically, the flaw arises from the inclusion of Brocade Fabric OS Switch passwords and authorization IDs within the embedded MLS DB file. This exposure poses risks for organizations utilizing Brocade SANnav, as it could facilitate unauthorized access to critical systems. Ensuring that systems are updated to Brocade SANnav version 2.2.2 or later mitigates this risk.

References