Description (CNA)
Possible information exposure through log file vulnerability where sensitive fields are recorded in the configuration log without masking on Brocade SANnav before v2.3.0 and 2.2.2a. Notes: To access the logs, the local attacker must have access to an already collected Brocade SANnav "supportsave" outputs.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Brocade / SANnav | affected Brocade SANnav before v2.3.0 and 2.2.2a |
CWE
CWE-312
References
- https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/22508
- https://security.netapp.com/advisory/ntap-20240229-0003/
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.