CVE-2025-6390

CWE-4974 documents4 sources
Severity
5.1MEDIUM
EPSS
0.0%
top 92.09%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Broadcom Brocade Sannav
Timeline
PublishedJul 10
Latest updateNov 18

Description

Brocade SANnav before SANnav 2.4.0a logs passwords and pbe keys in the Brocade SANnav server audit logs after installation and under specific conditions. These audit logs are the local server VM’s audit logs and are not controlled by SANnav. These logs are only visible to the server admin of the host server and are not visible to the SANnav admin or any SANnav user.

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Packages2 packages

▶CVEListV5broadcom/brocade_sannavbefore SANnav 2.4.0a

🔴Vulnerability Details

2
CVEList
Cleartext storage of sensitive information in Brocade SANnav server audit logs.↗2025-07-10
▶
GHSA
GHSA-9q9q-j3gj-3p8x: Brocade SANnav before SANnav 2↗2025-07-10
▶

💬Community

1
Bugzilla
CVE-2025-10158 rsync: Rsync: Out of bounds array access via negative index↗2025-11-18
▶
CVE-2025-6390 (MEDIUM CVSS 5.1) | Brocade SANnav before SANnav 2.4.0a | cvebase.io