CVE-2024-29965 — Insecure Storage of Sensitive Information in Brocade Sannav

CWE-922 — Insecure Storage of Sensitive Information3 documents3 sources
Severity
5.9MEDIUMNVD
CNA6.8
EPSS
0.2%
top 53.70%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Broadcom Brocade SannavBrocade Sannav
Timeline
PublishedApr 19

Description

In Brocade SANnav before v2.3.1, and v2.3.0a, it is possible to back up the appliance from the web interface or the command line interface ("SSH"). The resulting backups are world-readable. A local attacker can recover backup files, restore them to a new malicious appliance, and retrieve the passwords of all the switches.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:NExploitability: 1.5 | Impact: 4.0

Affected Packages2 packages

▶CVEListV5brocade/brocade_sannav before v2.3.1, and v2.3.0a

🔴Vulnerability Details

2
GHSA
GHSA-68wm-4xjg-6p6m: In Brocade SANnav before v2↗2024-04-19
▶
CVEList
Insecure backup↗2024-04-19
▶
CVE-2024-29965 — Broadcom Brocade Sannav vulnerability | cvebase