CVE-2022-33187

CWE-532 — Log File Information Exposure3 documents3 sources
Severity
4.9MEDIUM
EPSS
0.3%
top 43.61%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Broadcom Brocade SannavBrocade Brocade Sannav
Timeline
PublishedDec 9

Description

Brocade SANnav before v2.2.1 logs usernames and encoded passwords in debug-enabled logs. The vulnerability could allow an attacker with admin privilege to read sensitive information.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:NExploitability: 1.2 | Impact: 4.2

Affected Packages2 packages

▶CVEListV5brocade/brocade_sannavBrocade SANnav versions before v2.2.1

🔴Vulnerability Details

2
GHSA
GHSA-58rj-c7p7-f4h9: Brocade SANnav before v2↗2022-12-09
▶
CVEList
Brocade SANnav before v2.2.1 logs usernames and encoded passwords in debug-enabled logs↗2022-12-09
▶
CVE-2022-33187 (MEDIUM CVSS 4.9) | Brocade SANnav before v2.2.1 logs u | cvebase.io