#VU88921 Information disclosure in Brocade SANnav - CVE-2024-29965 

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU88921

#VU88921 Information disclosure in Brocade SANnav - CVE-2024-29965

Published: April 23, 2024


Vulnerability identifier: #VU88921
Vulnerability risk: Medium
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2024-29965
CWE-ID: CWE-200
Exploitation vector: Remote access
Exploit availability: No public exploit available
Vulnerable software:
Brocade SANnav
Software vendor:
Brocade

Description

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to the backups from the appliance from the web interface or the command line interface ("SSH") are world-readable. A remote user can gain unauthorized access to sensitive information on the system.


Remediation

Install updates from vendor's website.

External links