PT-2026-98228 · Brocade · Sannav
CVE-2026-82371
·
Published
2026-09-24
·
Updated
2026-09-24
CVSS v4.0
8.5
High
| Vector | AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
Brocade SANnav versions prior to 3.0.1a
Description
Sensitive authentication data is exposed in plaintext within the discovery service log files. Individuals with file read access, such as those with access to system logs or support bundles, can retrieve administrative switch credentials and active session tokens. This exposure allows an attacker to compromise managed network infrastructure and gain access to active application sessions.
Recommendations
Update Brocade SANnav to version 3.0.1a or later.
Fix
Insertion into Log File
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Sannav