Low WID-SEC-2025-1497 1 CVE

Broadcom Brocade SANnav: Schwachstelle ermöglicht Offenlegung von Informationen

Published Jul 8, 2025 · Updated Jul 10, 2025 · Revision 2 · de-DE

Vendor: Broadcom Product: Brocade SANnav Platform: Linux

Summary

Ein lokaler Angreifer kann eine Schwachstelle in Broadcom Brocade SANnav ausnutzen, um Informationen offenzulegen.

Product

Brocade SANnav ist eine Managementlösung für Storage Area Networks (SAN).

Vulnerabilities 1

Medium 5.1

CVE-2025-6390

Cleartext storage of sensitive information in Brocade SANnav server audit logs.

Brocade SANnav before SANnav 2.4.0a logs passwords and pbe keys in the Brocade SANnav server audit logs after installation and under specific conditions. These audit logs are the local server VM’s audit logs and are not controlled by SANnav. These logs are on…

Broadcom Brocade SANnav

Jul 10, 2025

Revision history

2025-07-10 #2
Referenz(en) aufgenommen: EUVD-2025-21059
2025-07-08 #1
Initiale Fassung

References

Broadcom Brocade Security Advisory BSNSA35909 vom 2025-07-08
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/35909