CVE-2024-29964

Brocade SANnav versions before v2.3.0a do not correctly set permissions on files, including docker files. An unprivileged attacker who gains access to the server can read sensitive information from these files.

Score

CVSS 3.1 6.5 Medium

Status

Analyzed - sirt@brocade.com

Published

2024-04-19

Last modified

2024-09-18

Weaknesses

CWE-732

Affected products

• Brocade Sannav (Broadcom)
• Brocade Sannav (Brocade)
• Sannav (Brocade)

References

• https://support.broadcom.com/external/content/SecurityAdvisories/0/23249