Description
The class FileTransfer implemented in Brocade SANnav before v2.3.1, v2.3.0a, uses the ssh-rsa signature scheme, which has a SHA-1 hash.
The vulnerability could allow a remote, unauthenticated attacker to perform a man-in-the-middle attack.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Brocade | Brocade SANnav | versions before Brocade SANnav v2.3.1, v2.3.0a | — |
Advisories 1
- WID-SEC-2024-0918 Broadcom Brocade SANnav: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen BSI CERT-Bund (WID) · Oct 14, 2024