CVE-2024-29952
Assigner: brocade
Published: 2024-04-17T21:43:57.482Z
State: PUBLISHED
affected: defaultStatus: affected
product: Brocade SANnav
vendor: Brocade
versions: status: affected
version: before v2.3.1 and v2.3.0a
descriptions: supportingMedia: base64: no
type: text/html
value: A vulnerability in Brocade SANnav before v2.3.1 and v2.3.0a could allow an authenticated user to print the Auth, Priv, and SSL key store passwords in unencrypted logs by manipulating command variables.<br>


value: A vulnerability in Brocade SANnav before v2.3.1 and v2.3.0a could allow an authenticated user to print the Auth, Priv, and SSL key store passwords in unencrypted logs by manipulating command variables.


impacts: capecId: CAPEC-37
descriptions: value: CAPEC-37: Retrieve Embedded Sensitive Data
metrics: cvssV3_1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 5.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-312
description:  CWE-312: Cleartext Storage of Sensitive Information
type: CWE
source: discovery: UNKNOWN
title: Clear text storage of sensistive information by manipulating command variables 
x_generator: engine: Vulnogram 0.1.0-dev