Brocade SANnav Vulnerability Allows Unauthorized Access to Kafka APIs
CVE-2024-4159
5.3MEDIUM
What is CVE-2024-4159?
Brocade SANnav versions earlier than 2.3.0a have been identified to lack adequate protection mechanisms on TCP ports 2377 and 7946. This vulnerability enables unauthenticated attackers to potentially intercept Docker-related information, compromising the security of network configurations and exposing sensitive data. The issue underscores the importance of applying security updates and best practices to mitigate risks associated with open ports in network infrastructure.
Affected Version(s)
Brocade SANnav before v2.3.1
References
CVSS V3.1
Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved