Sensitive Information Exposure in Brocade SANnav

CVE-2024-10404

What is CVE-2024-10404?

The CalInvocationHandler in Brocade SANnav before version 2.3.1b has a significant issue where it logs sensitive information, such as passwords and SNMP responses, in clear text. This vulnerability allows an authenticated local attacker with administrative privileges to access sensitive data by collecting a 'supportsave' or obtaining access to a previously generated 'supportsave'. This issue is particularly concerning as it stems from an incomplete fix for a related vulnerability, leading to potential exploitation scenarios.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References