Password Logging Vulnerability in Brocade SANnav Software by Broadcom

CVE-2025-6390

What is CVE-2025-6390?

An information disclosure vulnerability exists in Brocade SANnav that allows sensitive data, such as passwords and encryption keys, to be logged in the server's audit logs. This occurs under specific conditions following installation and affects local server VM audit logs. Importantly, these logs can only be accessed by the server administrator and remain hidden from SANnav administrators and users, potentially exposing critical information unintentionally.

References