broadcom brocade sannav vulnerabilities and exploits

(subscribe to this query)

4.9

CVSSv3

Brocade SANnav before v2.2.1 logs usernames and encoded passwords in debug-enabled logs. The vulnerability could allow an attacker with admin privilege to read sensitive information.

Broadcom Brocade Sannav

7.4

CVSSv3

A vulnerability, in The ReportsTrustManager class of Brocade SANnav versions before v2.0, could allow an malicious user to perform a man-in-the-middle attack against Secure Sockets Layer(SSL)connections.

Broadcom Brocade Sannav

9.8

CVSSv3

Brocade SANnav versions before v2.1.0, contain a Plaintext Password Storage vulnerability.

Broadcom Brocade Sannav

5.5

CVSSv3

The authentication mechanism, in Brocade SANnav versions before v2.0, logs plaintext account credentials at the ‘trace’ and the 'debug' logging level; which could allow a local authenticated malicious user to access sensitive information.

Broadcom Brocade Sannav

6.5

CVSSv3

Brocade SANnav before Brocade SANvav v. 2.2.0.2 and Brocade SANanv v.2.1.1.8 logs the Brocade Fabric OS switch password in plain text in asyncjobscheduler-manager.log

Broadcom Sannav

7.5

CVSSv3

In Brocade SANnav before Brocade SANnav v2.2.0.2 and Brocade SANnav2.1.1.8, encoded scp-server passwords are stored using Base64 encoding, which could allow an attacker able to access log files to easily decode the passwords.

Broadcom Sannav

9.8

CVSSv3

In Brocade SANnav before Brocade SANnav 2.2.0, multiple endpoints associated with Zone management are susceptible to SQL injection, allowing an malicious user to run arbitrary SQL commands.

Broadcom Sannav

7.5

CVSSv3

In Brocade SANnav version before SANN2.2.0.2 and Brocade SANNav prior to 2.1.1.8, the implementation of TLS/SSL Server Supports the Use of Static Key Ciphers (ssl-static-key-ciphers) on ports 443 & 18082.

Broadcom Sannav

7.5

CVSSv3

Brocade SANnav before version 2.1.1 logs account credentials at the ‘trace’ logging level.

Broadcom Sannav

3.3

CVSSv3

Brocade SANnav before version SANnav 2.2.0 logs the REST API Authentication token in plain text.

Broadcom Sannav

Get Started

« PREV 1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook