CVE-2024-29964
Assigner: brocade
Published: 2024-04-19T04:39:17.273Z
State: PUBLISHED
affected: defaultStatus: affected
product: Brocade SANnav
vendor: Brocade
versions: status: affected
version: before v2.3.0a
descriptions: supportingMedia: base64: no
type: text/html
value: &nbsp;Brocade SANnav versions before v2.3.0a do not correctly set permissions on files, including docker files. An unprivileged attacker who gains access to the server can read sensitive information from these files.<br>
value:  Brocade SANnav versions before v2.3.0a do not correctly set permissions on files, including docker files. An unprivileged attacker who gains access to the server can read sensitive information from these files.

metrics: cvssV3_1: attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: NONE
baseScore: 5.7
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-200
description: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
type: CWE
source: discovery: UNKNOWN
title: Brocade SANnav versions before v2.3.0a do not correctly set permissions on files, including docker files
x_generator: engine: Vulnogram 0.1.0-dev