PT-2025-29167 · Brocade · Brocade Sannav
CVE-2025-6392
·
Publicado
2025-07-08
·
Atualizado
2025-08-27
CVSS v4.0
6.7
Média
| Vetor | AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions:
Brocade SANnav versions prior to 2.4.0a
Description:
Brocade SANnav versions prior to 2.4.0a could log database passwords in clear text within audit logs when the daily data dump collector executes
docker exec commands. These audit logs are local to the server VM and are not managed by SANnav. Access to these logs is restricted to the host server administrator and is not accessible to SANnav administrators or users.Recommendations:
Update Brocade SANnav to version 2.4.0a or later.
Correção
Insertion into Log File
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Brocade Sannav