Description (CNA)
The class FileTransfer implemented in Brocade SANnav before v2.3.1, v2.3.0a, uses the ssh-rsa signature scheme, which has a SHA-1 hash. The vulnerability could allow a remote, unauthenticated attacker to perform a man-in-the-middle attack.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Brocade / Brocade SANnav | affected versions before Brocade SANnav v2.3.1, v2.3.0a |
CWE
CWE-326
References
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.