Описание
An information exposure through log file vulnerability exists in Brocade SANnav before Brocade SANnav 2.2.2, where configuration secrets are logged in supportsave. Supportsave file is generated by an admin user troubleshooting the switch. The Logged information may include usernames and passwords, and secret keys.
Уязвимые конфигурации
Конфигурация 1Версия до 2.2.2 (исключая)
cpe:2.3:a:broadcom:brocade_sannav:*:*:*:*:*:*:*:*
EPSS
Процентиль: 5%
0.0002
Низкий
4.4 Medium
CVSS3
Дефекты
CWE-538
CWE-532
Связанные уязвимости
CVSS3: 4.4
github
около 1 года назад
An information exposure through log file vulnerability exists in Brocade SANnav before Brocade SANnav 2.2.2, where configuration secrets are logged in supportsave. Supportsave file is generated by an admin user troubleshooting the switch. The Logged information may include usernames and passwords, and secret keys.
EPSS
Процентиль: 5%
0.0002
Низкий
4.4 Medium
CVSS3
Дефекты
CWE-538
CWE-532