Description
Under certain error conditions at time of SANnav installation or upgrade, the encryption key can be written into and obtained from a Brocade SANnav supportsave. An attacker with privileged access to the Brocade SANnav database could use the encryption key to obtain passwords used by Brocade SANnav.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Brocade | Brocade SANnav | Brocade SANnav before 2.3.1b | — |
Advisories 1
- WID-SEC-2025-0367 Broadcom Brocade SANnav: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 3, 2025