← Back

CVE-2024-29965

nvd nist
Published: Apr 19, 2024Modified: Jun 17, 2026

JSON object

Loading...
5.9
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N
Exploitability: 1.5 / Impact: 4.0
Source: NVD

Description

In Brocade SANnav before v2.3.1, and v2.3.0a, it is possible to back up the appliance from the web interface or the command line interface ("SSH"). The resulting backups are world-readable. A local attacker can recover backup files, restore them to a new malicious appliance, and retrieve the passwords of all the switches.

Affected (1)

Broadcom
1 product
Brocade Sannav
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Brocade Sannav
Before 2.3.0a

Related CWEs

CWE-922
Insecure Storage of Sensitive Information
The product stores sensitive information without properly limiting read or write access by unauthorized actors.

References (2)

Source: sirt@brocade.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.