Skip to content
fr Sign in
5.5 Medium

CVE-2024-10404 CalInvocationHandler in Brocade SANnav before 2.3.1b logs sensitive information in clear text

Description

CalInvocationHandler in Brocade SANnav before 2.3.1b logs sensitive information in clear text. The vulnerability could allow an authenticated, local attacker to view Brocade Fabric OS switch sensitive information in clear text. An attacker with administrative privileges could retrieve sensitive information including passwords; SNMP responses that contain AuthSecret and PrivSecret after collecting a “supportsave” or getting access to an already collected “supportsave”. NOTE: this issue exists because of an incomplete fix for CVE-2024-29952

Affected products and versions

Product Affected versions Fixed in
Brocade SANnav Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Brocade SANnav

The 34 CVEs of Brocade SANnav →
CVE-2026-5769 A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in… 5.6 Medium CVE-2026-5049 A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a 6.9 Medium CVE-2026-5048 In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability… 6.1 Medium CVE-2026-5047 A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and  authentication tokens in log… 8.2 High
Track this CVE