CVE-2025-1053 — Brocade SANnav encryption key is logged in the debug logs

CVE-2025-1053

Brocade SANnav encryption key is logged in the debug logs PUBLISHED

Description (CNA)

Under certain error conditions at time of SANnav installation or upgrade, the encryption key can be written into and obtained from a Brocade SANnav supportsave. An attacker with privileged access to the Brocade SANnav database could use the encryption key to obtain passwords used by Brocade SANnav.

Affected (CNA)

Vendor / product	Versions
Brocade / Brocade SANnav	affected Brocade SANnav before 2.3.1b

CWE

CWE-532

References

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25399

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.