Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4x99-8pj6-g63h

Опубликовано: 31 авг. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

Brocade SANnav before v2.3.0 and v2.2.2a stores SNMPv3 Authentication passwords in plaintext. A privileged user could retrieve these credentials with knowledge and access to these log files. SNMP credentials could be seen in SANnav SupportSave if the capture is performed after an SNMP configuration failure causes an SNMP communication log dump.

Brocade SANnav before v2.3.0 and v2.2.2a stores SNMPv3 Authentication passwords in plaintext. A privileged user could retrieve these credentials with knowledge and access to these log files. SNMP credentials could be seen in SANnav SupportSave if the capture is performed after an SNMP configuration failure causes an SNMP communication log dump.

EPSS

Процентиль: 12%
0.00039
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-312

Связанные уязвимости

CVSS3: 5.4
nvd
больше 2 лет назад

Brocade SANnav before v2.3.0 and v2.2.2a stores SNMPv3 Authentication passwords in plaintext. A privileged user could retrieve these credentials with knowledge and access to these log files. SNMP credentials could be seen in SANnav SupportSave if the capture is performed after an SNMP configuration failure causes an SNMP communication log dump.

EPSS

Процентиль: 12%
0.00039
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-312