Skip to content
OpenAdvisories
High · 7.5 CVE-2024-29958 EUVD-2024-26932GHSA-mwpf-hrvf-537f

Encryption key in the console when a privileged user executes the script to replace the Brocade SANnav Management Portal standby node.

Published Apr 19, 2024 · Updated Aug 2, 2024 · Assigned by brocade

Description

A vulnerability in Brocade SANnav before v2.3.1 and v2.3.0a prints the encryption key in the console when a privileged user executes the script to replace the Brocade SANnav Management Portal standby node. This could provide attackers an additional, less protected path to acquiring the encryption key.

Affected products

VendorProductAffectedFixed
Brocade Brocade SANnav before v2.3.1 and v2.3.0a —

Advisories 1

References