Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Broadcom Brocade SANnav ausnutzen, um Informationen offenzulegen oder um Sicherheitsmaßnahmen zu umgehen.
Product
Brocade SANnav ist eine Managementlösung für Storage Area Networks (SAN).
Vulnerabilities 2
-
High 8.6
Syslog traffic sent in clear-text
In Brocade SANnav, before Brocade SANnav v2.3.0, syslog traffic received clear text. This could allow an unauthenticated, remote attacker to capture sensitive information.
-
Medium 4.3
Protection mechanisms
Brocade SANnav before v2.3.0a lacks protection mechanisms on port 2377/TCP and 7946/TCP, which could allow an unauthenticated attacker to sniff the SANnav Docker information.
Revision history
-
#2
Neue Updates aufgenommen
-
#1
Initiale Fassung
References
-
Brocade Security Advisory vom 2024-04-24
https://support.broadcom.com/external/content/SecurityAdvisories/0/23282
-
Brocade Security Advisory vom 2024-04-24
https://support.broadcom.com/external/content/SecurityAdvisories/0/23283
-
Brocade Security Advisory vom 2024-04-24
https://support.broadcom.com/external/content/SecurityAdvisories/0/23284
-
Brocade Security Advisory vom 2024-04-24
https://support.broadcom.com/external/content/SecurityAdvisories/0/23285
-
### vom 2024-10-15
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24999