CVE-2024-29952

A vulnerability in Brocade SANnav before v2.3.1 and v2.3.0a could allow an authenticated user to print the Auth, Priv, and SSL key store passwords in unencrypted logs by manipulating command variables.

Score

CVSS 3.1 5.5 Medium

Status

Analyzed - sirt@brocade.com

Published

2024-04-17

Last modified

2024-08-02

Weaknesses

CWE-312

Affected products

• Brocade Sannav (Broadcom)
• Brocade Sannav (Brocade)
• Sannav (Brocade)

References

• https://support.broadcom.com/external/content/SecurityAdvisories/0/23238