7.1
High
CVE-2025-12773 A vulnerability in update-reports-purge-settings.sh script logging for Brocade SANnav before 2.4.0a could allow the…
Description
A vulnerability in update-reports-purge-settings.sh script logging for Brocade SANnav before 2.4.0a could allow the collection of SANnav database password in the system audit logs. The vulnerability could allow a remote authenticated attacker with access to the audit logs to access the Brocade SANnav database password.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SANnav | Versions not published |
Other CVEs of SANnav
The 38 CVEs of SANnav →
CVE-2026-85417
Incomplete property masking in the SANnav logging subsystem permits SNMP authentication and privacy passwords to be…
6.4
Medium
CVE-2026-14441
A logic flaw in Java cache key handling object comparison handling could lead to improper identifier resolution when…
6.9
Medium
CVE-2026-14442
An information exposure vulnerability in the job scheduling component of SANnav allows sensitive credentials to be…
6.9
Medium
CVE-2026-14443
Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav versions before 3.0.1a permit…
8.4
High