CVE-2022-43933 — configuration secrets are logged in support-save

CVE-2022-43933

configuration secrets are logged in support-save PUBLISHED

Description (CNA)

An information exposure through log file vulnerability exists in Brocade SANnav before Brocade SANnav 2.2.2, where configuration secrets are logged in supportsave. Supportsave file is generated by an admin user troubleshooting the switch. The Logged information may include usernames and passwords, and secret keys.

Affected (CNA)

Vendor / product	Versions
Brocade / SANnav	affected before Brocade SANnav 2.2.2

CWE

CWE-538

References

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/21221

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.