Brocade SANnav Vulnerability Allows Unauthorized Access to Kafka APIs
CVE-2024-4159

5.3MEDIUM

Key Information:

Vendor

Brocade

Vendor
CVE Published:
25 April 2024

What is CVE-2024-4159?

Brocade SANnav versions earlier than 2.3.0a have been identified to lack adequate protection mechanisms on TCP ports 2377 and 7946. This vulnerability enables unauthenticated attackers to potentially intercept Docker-related information, compromising the security of network configurations and exposing sensitive data. The issue underscores the importance of applying security updates and best practices to mitigate risks associated with open ports in network infrastructure.

Affected Version(s)

Brocade SANnav before v2.3.1

References

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.