Sensitive Information Exposure in Brocade SANnav
CVE-2024-10404

5.5MEDIUM

Key Information:

Vendor

Brocade
Status
Brocade Sannav
Vendor
CVE Published:
14 February 2025

What is CVE-2024-10404?

The CalInvocationHandler in Brocade SANnav before version 2.3.1b has a significant issue where it logs sensitive information, such as passwords and SNMP responses, in clear text. This vulnerability allows an authenticated local attacker with administrative privileges to access sensitive data by collecting a 'supportsave' or obtaining access to a previously generated 'supportsave'. This issue is particularly concerning as it stems from an incomplete fix for a related vulnerability, leading to potential exploitation scenarios.

Affected Version(s)

Brocade SANnav before 2.3.1b

References

https://support.broadcom.com/web/ecx/support-content-noti...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.