Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5jx5-2f25-63x5

Опубликовано: 10 июл. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 5.1
CVSS3: 4.4

Описание

Brocade SANnav before SANnav 2.4.0a logs plaintext passphrases in the Brocade SANnav host server audit logs while executing OpenSSL command using a passphrase from the command line or while providing the passphrase through a temporary file.

These audit logs are the local server VM’s audit logs and are not controlled by SANnav. These logs are only visible to the server admin of the host server and are not visible to the SANnav admin or any SANnav user.

Brocade SANnav before SANnav 2.4.0a logs plaintext passphrases in the Brocade SANnav host server audit logs while executing OpenSSL command using a passphrase from the command line or while providing the passphrase through a temporary file.

These audit logs are the local server VM’s audit logs and are not controlled by SANnav. These logs are only visible to the server admin of the host server and are not visible to the SANnav admin or any SANnav user.

EPSS

Процентиль: 3%
0.00017
Низкий

5.1 Medium

CVSS4

4.4 Medium

CVSS3

Дефекты

CWE-497

Связанные уязвимости

CVSS3: 4.4
nvd
7 месяцев назад

Brocade SANnav before SANnav 2.4.0a logs plaintext passphrases in the Brocade SANnav host server audit logs while executing OpenSSL command using a passphrase from the command line or while providing the passphrase through a temporary file. These audit logs are the local server VM’s audit logs and are not controlled by SANnav. These logs are only visible to the server admin of the host server and are not visible to the SANnav admin or any SANnav user.

CVSS3: 2.3
fstec
7 месяцев назад

Уязвимость программного обеспечение для управления сетью SAN Brocade SANnav, связанная с раскрытием системных данных неавторизованным лицам, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 3%
0.00017
Низкий

5.1 Medium

CVSS4

4.4 Medium

CVSS3

Дефекты

CWE-497