6.8
Medium
CVE-2024-2859 By default, SANnav OVA is shipped with root user login enabled
Description
By default, SANnav OVA is shipped with root user login enabled. While protected by a password, access to root could expose SANnav to a remote attacker should they gain access to the root account.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Brocade SANnav | 2.3.0 | No fix stated |
| brocade_sannav | 2.3.0 | No fix stated |
References
- support.broadcom.com support.broadcom.com
- security.netapp.com security.netapp.com
Timeline
- Published
- Last modified
Other CVEs of Brocade SANnav
The 34 CVEs of Brocade SANnav →
CVE-2026-5769
A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in…
5.6
Medium
CVE-2026-5049
A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a
6.9
Medium
CVE-2026-5048
In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability…
6.1
Medium
CVE-2026-5047
A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens in log…
8.2
High