CVE-2024-29966

Brocade SANnav OVA before v2.3.1 and v2.3.0a contain hard-coded credentials in the documentation that appear as the appliance's root password. The vulnerability could allow an unauthenticated attacker full access to the Brocade SANnav appliance.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - sirt@brocade.com

Published

2024-04-19

Last modified

2024-08-02

Weaknesses

CWE-798

Affected products

• Brocade Sannav (Broadcom)
• Brocade Sannav (Brocade)
• Sannav (Brocade)

References

• https://support.broadcom.com/external/content/SecurityAdvisories/0/23255