CVE-2024-2240

CWE-2503 documents3 sources
Severity
8.6HIGH
EPSS
1.0%
top 22.79%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Broadcom Brocade SannavBrocade Brocade Sannav
Timeline
PublishedFeb 14

Description

Docker daemon in Brocade SANnav before SANnav 2.3.1b runs without auditing. The vulnerability could allow a remote authenticated attacker to execute various attacks.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N

Affected Packages2 packages

▶CVEListV5brocade/brocade_sannavBrocade SANnav before 2.3.1b

🔴Vulnerability Details

2
GHSA
GHSA-59x4-rhqf-fw9r: Docker daemon in Brocade SANnav before SANnav 2↗2025-02-14
▶
CVEList
Docker implementation in Brocade SANnav is missing Audit Rules.↗2025-02-14
▶
CVE-2024-2240 (HIGH CVSS 8.6) | Docker daemon in Brocade SANnav bef | cvebase.io