5.5
Moyenne
CVE-2024-10404 CalInvocationHandler in Brocade SANnav before 2.3.1b logs sensitive information in clear text
Description
CalInvocationHandler in Brocade SANnav before 2.3.1b logs sensitive information in clear text. The vulnerability could allow an authenticated, local attacker to view Brocade Fabric OS switch sensitive information in clear text. An attacker with administrative privileges could retrieve sensitive information including passwords; SNMP responses that contain AuthSecret and PrivSecret after collecting a “supportsave” or getting access to an already collected “supportsave”. NOTE: this issue exists because of an incomplete fix for CVE-2024-29952
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Brocade SANnav | Versions non publiées |
Autres CVE de Brocade SANnav
Les 34 CVE de Brocade SANnav →
CVE-2026-5769
A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in…
5.6
Moyenne
CVE-2026-5049
A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a
6.9
Moyenne
CVE-2026-5048
In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability…
6.1
Moyenne
CVE-2026-5047
A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens in log…
8.2
Élevée