Database Password Exposure in Brocade SANnav by Broadcom
CVE-2025-12680
6MEDIUM
What is CVE-2025-12680?
Brocade SANnav versions before 2.4.0b have a vulnerability that causes database passwords to be logged in clear text on the standby SANnav server following disaster recovery failover. This exposure could potentially allow a remote authenticated attacker with admin privileges to access sensitive logs or support data, ultimately compromising the security of the database credentials.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
SANnav before Brocade SANnav 2.4.0b