Description
Brocade SANnav versions before v2.3.0a do not correctly set permissions on files, including docker files. An unprivileged attacker who gains access to the server can read sensitive information from these files.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Brocade | Brocade SANnav | before v2.3.0a | — |
Advisories 1
- WID-SEC-2024-0934 Broadcom Brocade SANnav: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 14, 2024