Encryption Key Exposure in Brocade SANnav by Broadcom

CVE-2025-1053

What is CVE-2025-1053?

During specific error conditions encountered during the installation or upgrade of Brocade SANnav, sensitive encryption keys may be incorrectly written and accessible through the Brocade SANnav supportsave feature. This scenario allows an attacker with privileged access to the Brocade SANnav database to retrieve these keys, potentially leading to unauthorized access to sensitive passwords utilized within the SANnav environment.

References