← CVE Intelligence

CVE-2024-29960

Identical SSH keys utilized inside the OVA image (CVE-2024-29960) PUBLISHED

Description (CNA)

In Brocade SANnav server before v2.3.1 and v2.3.0a, the SSH keys inside the OVA image are identical in the VM every time SANnav is installed. Any Brocade SAnnav VM based on the official OVA images is vulnerable to MITM over SSH. An attacker can decrypt and compromise the SSH traffic to the SANnav.

Affected (CNA)

Vendor / productVersions
Brocade / Brocade SANnavaffected before v2.3.1 and v2.3.0a

CWE

CWE-798

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.