Skip to content
OpenAdvisories
Medium WID-SEC-2024-0918 3 CVEs

Broadcom Brocade SANnav: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

Published Apr 17, 2024 · Updated Oct 14, 2024 · Revision 3 · de-DE

Vendor: Broadcom Product: Brocade SANnav

Summary

Ein entfernter Angreifer kann mehrere Schwachstellen in Broadcom Brocade SANnav ausnutzen, um Informationen offenzulegen.

Product

Brocade SANnav ist eine Managementlösung für Storage Area Networks (SAN).

Vulnerabilities 3

  • High 7.5
    CVE-2024-29950

    Brocade SANnav before v2.3.1, v2.3.0a uses weak encryption

    The class FileTransfer implemented in Brocade SANnav before v2.3.1, v2.3.0a, uses the ssh-rsa signature scheme, which has a SHA-1 hash. The vulnerability could allow a remote, unauthenticated attacker to perform a man-in-the-middle attack.

    Brocade Brocade SANnav
  • Medium 6.5
    CVE-2024-29956

    cleartext password in supportsave logs when a user schedules a switch Supportsave from Brocade SANnav

    A vulnerability in Brocade SANnav before v2.3.1 and v2.3.0a prints the Brocade SANnav password in clear text in supportsave logs when a user schedules a switch Supportsave from Brocade SANnav.

    Brocade Brocade SANnav
  • Medium 5.7
    CVE-2024-29951

    Brocade SANnav has weak encryption in internal SSH ports

    Brocade SANnav before v2.3.1 and v2.3.0a uses the SHA-1 hash in internal SSH ports that are not open to remote connection.

    Brocade Brocade SANnav

Revision history

  1. #3

    Neue Updates aufgenommen

  2. #2

    Link korrigiert

  3. #1

    Initiale Fassung

References