Brocade SANnav vulnerable to local authentication flaw

CVE-2024-2860

What is CVE-2024-2860?

An incorrect local authentication vulnerability exists in the PostgreSQL implementation within Brocade SANnav versions earlier than 2.3.0a. This flaw can be exploited by an attacker who gains access to the virtual machine (VM) hosting the Brocade SANnav application. By exploiting this vulnerability, the attacker could potentially access sensitive data stored in the PostgreSQL database, compromising the confidentiality and integrity of critical information.

References