Skip to content
OpenAdvisories
Medium · 4.4 CVE-2022-43933 EUVD-2022-46903GHSA-76rj-9h8w-cwx9

configuration secrets are logged in support-save

Published Nov 21, 2024 · Updated Nov 21, 2024 · Assigned by brocade

Description

An information exposure through log file vulnerability exists in Brocade SANnav before Brocade SANnav 2.2.2, where configuration secrets are logged in supportsave. Supportsave file is generated by an admin user troubleshooting the switch. The Logged information may include usernames and passwords, and secret keys.

Affected products

VendorProductAffectedFixed
Brocade SANnav before Brocade SANnav 2.2.2 —

References