Brocade SANnav OVA Hard-Coded Credentials Vulnerability

CVE-2024-29966

What is CVE-2024-29966?

The vulnerability in Brocade SANnav OVA versions prior to v2.3.1 and v2.3.0a arises from hard-coded credentials listed in the documentation. These credentials, which resemble the appliance's root password, can be exploited by an unauthenticated attacker, granting them complete access to the Brocade SANnav appliance. This security risk emphasizes the necessity for organizations to ensure their Brocade SANnav installations are updated and properly configured to prevent unauthorized access.

References