Skip to content
OpenAdvisories
High WID-SEC-2023-2238 3 CVEs

Broadcom Brocade SANnav: Mehrere Schwachstellen

Published Aug 30, 2023 · Updated Oct 14, 2024 · Revision 2 · de-DE

Vendor: Broadcom Product: Brocade SANnav Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in Broadcom Brocade SANnav ausnutzen, um Informationen offenzulegen oder Sicherheitsvorkehrungen zu umgehen.

Product

Brocade SANnav ist eine Managementlösung für Storage Area Networks (SAN).

Vulnerabilities 3

  • High 8.1
    CVE-2023-31424

    Web authentication and authorization bypass

    Brocade SANnav Web interface before Brocade SANnav v2.3.0 and v2.2.2a allows remote unauthenticated users to bypass web authentication and authorization.

    Brocade SANnav
  • Medium 5.7
    CVE-2023-31423

    Possible information exposure through log file vulnerability

    Possible information exposure through log file vulnerability where sensitive fields are recorded in the configuration log without masking on Brocade SANnav before v2.3.0 and 2.2.2a. Notes: To access the logs, the local attacker must have access to an already …

    Brocade SANnav
  • Medium 5.4
    CVE-2023-31925

    Storage of clear text password in Brocade SANnav

    Brocade SANnav before v2.3.0 and v2.2.2a stores SNMPv3 Authentication passwords in plaintext. A privileged user could retrieve these credentials with knowledge and access to these log files. SNMP credentials could be seen in SANnav SupportSave if the capture …

    Brocade Brocade SANnav

Revision history

  1. #2

    Neue Updates aufgenommen

  2. #1

    Initiale Fassung

References