Description
In Brocade ASCG before 3.5.0, a local unauthorized user on the ASCG VM who can issue a request to the SANnav host network namespace can extract stored management credentials for onboarded SANnav instances and compromise connected Brocade SANnav servers or managed Brocade Fibre Channel switches.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Brocade | Brocade Active Support Connectivity Gateway | < 3.5.0 | 3.5.0 |