Not rated
CVE-2022-28161 An information exposure through log file vulnerability in Brocade SANNav versions before Brocade SANnav 2.2.0 could…
Description
An information exposure through log file vulnerability in Brocade SANNav versions before Brocade SANnav 2.2.0 could allow an authenticated, local attacker to view sensitive information such as ssh passwords in filetansfer.log in debug mode. To exploit this vulnerability, the attacker would need to have valid user credentials and turn on debug mode.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Brocade SANnav | Versions not published |
References
- www.broadcom.com www.broadcom.com
Timeline
- Published
- Last modified
Other CVEs of Brocade SANnav
The 18 CVEs of Brocade SANnav →
CVE-2022-28168
In Brocade SANnav before Brocade SANnav v2.2.0.2 and Brocade SANnav2.1.1.8, encoded scp-server passwords are stored…
Not rated
CVE-2022-28167
Brocade SANnav before Brocade SANvav v
Not rated
CVE-2022-28166
In Brocade SANnav version before SANN2.2.0.2 and Brocade SANNav before 2.1.1.8, the implementation of TLS/SSL Server…
Not rated
CVE-2022-28162
Brocade SANnav before version SANnav 2.2.0 logs the REST API Authentication token in plain text
Not rated