Skip to content
OpenAdvisories
Medium WID-SEC-2025-0367 5 CVEs

Broadcom Brocade SANnav: Mehrere Schwachstellen

Published Feb 13, 2025 · Updated Sep 3, 2025 · Revision 2 · de-DE

Vendor: Broadcom Product: Brocade SANnav

Summary

Ein Angreifer kann mehrere Schwachstellen in Broadcom Brocade SANnav ausnutzen, um Informationen preiszugeben, Daten zu manipulieren und nicht spezifizierte Aktionen durchzuführen.

Product

Brocade SANnav ist eine Managementlösung für Storage Area Networks (SAN).

Vulnerabilities 5

  • High 8.6
    CVE-2024-2240

    Docker implementation in Brocade SANnav is missing Audit Rules.

    Docker daemon in Brocade SANnav before SANnav 2.3.1b runs without auditing. The vulnerability could allow a remote authenticated attacker to execute various attacks.

    Brocade Brocade SANnav
  • High 8.6
    CVE-2025-1053

    Brocade SANnav encryption key is logged in the debug logs

    Under certain error conditions at time of SANnav installation or upgrade, the encryption key can be written into and obtained from a Brocade SANnav supportsave. An attacker with privileged access to the Brocade SANnav database could use the encryption key to …

    Brocade Brocade SANnav
  • High 8.2
    CVE-2024-4282

    Weak TLS Ciphers on Brocade SANnav OVA SSH port 22

    Brocade SANnav OVA before SANnav 2.3.1b enables SHA1 deprecated setting for SSH for port 22.

    Brocade Brocade SANnav
  • Medium 6.9
    CVE-2024-10405

    Weak TLS Ciphers on Brocade SANnav port 443 & 18082

    Brocade SANnav before SANnav 2.3.1b enables weak TLS ciphers on ports 443 and 18082. In case of a successful exploit, an attacker can read Brocade SANnav data stream that includes monitored Brocade Fabric OS switches performance data, port status, zoning info…

    Brocade Brocade SANnav
  • Medium 5.5
    CVE-2024-10404

    Clear text password seen in switch-asset-collectors-mw in Brocade SANnav supportsave

    CalInvocationHandler in Brocade SANnav before 2.3.1b logs sensitive information in clear text. The vulnerability could allow an authenticated, local attacker to view Brocade Fabric OS switch sensitive information in clear text. An attacker with administrative…

    Brocade Brocade SANnav

Revision history

  1. #2

    Referenz(en) aufgenommen: NTAP-20250904-0001

  2. #1

    Initiale Fassung

References