Brocade SANnav Vulnerability: Encryption Key Stored in DR Log Files

CVE-2024-29957

What is CVE-2024-29957?

A security issue has been identified in Brocade SANnav where, under Disaster Recovery mode, encryption keys are improperly stored within the DR log files. This configuration flaw potentially exposes sensitive information, allowing unauthorized access to the encryption key via unprotected log data. This vulnerability underscores the importance of reviewing storage security practices, particularly for configurations relying on disaster recovery protocols, to mitigate the risk of unintended data exposure.

References