Description
Brocade
SANnav before v2.3.0 and v2.2.2a stores SNMPv3 Authentication passwords
in plaintext. A privileged user could retrieve these credentials with
knowledge and access to these log files. SNMP
credentials could be seen in SANnav SupportSave if the capture is
performed after an SNMP configuration failure causes an SNMP
communication log dump.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Brocade | Brocade SANnav | Brocade SANnav before v2.3.0 and v2.2.2a | — |
Advisories 1
- WID-SEC-2023-2238 Broadcom Brocade SANnav: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 14, 2024