WID-SEC-W-2024-0918

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Broadcom Brocade SANnav: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

view advisory published 2024-04-17

Ein entfernter Angreifer kann mehrere Schwachstellen in Broadcom Brocade SANnav ausnutzen, um Informationen offenzulegen.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2024-29956USmedium6.5OT elevated—
A vulnerability in Brocade SANnav before v2.3.1 and v2.3.0a prints the Brocade SANnav password in clear text in supportsave logs when a user schedules a switch Supportsave from Bro…
CVE-2024-29951USmedium5.7—
Brocade SANnav before v2.3.1 and v2.3.0a uses the SHA-1 hash in internal SSH ports that are not open to remote connection.
CVE-2024-29950USmedium5.9—
The class FileTransfer implemented in Brocade SANnav before v2.3.1, v2.3.0a, uses the ssh-rsa signature scheme, which has a SHA-1 hash. The vulnerability could allow a remote, unau…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan