Database Password Exposure in Brocade SANnav by Broadcom
CVE-2025-12680

6MEDIUM

Key Information:

Vendor

Brocade
Status
Sannav
Vendor
CVE Published:
2 February 2026

What is CVE-2025-12680?

Brocade SANnav versions before 2.4.0b have a vulnerability that causes database passwords to be logged in clear text on the standby SANnav server following disaster recovery failover. This exposure could potentially allow a remote authenticated attacker with admin privileges to access sensitive logs or support data, ultimately compromising the security of the database credentials.

Affected Version(s)

SANnav before Brocade SANnav 2.4.0b

References

https://support.broadcom.com/web/ecx/support-content-noti...

CVSS V4

Score:
6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.