broadcom sannav vulnerabilities and exploits

(subscribe to this query)

Brocade SANnav Web interface before Brocade SANnav v2.3.0 and v2.2.2a allows remote unauthenticated users to bypass web authentication and authorization.

Brocade Sannav Broadcom Brocade Sannav

Possible information exposure through log file vulnerability where sensitive fields are recorded in the configuration log without masking on Brocade SANnav before v2.3.0 and 2.2.2a. Notes: To access the logs, the local attacker must have access to an already collected Brocade SAN...

Brocade Sannav Broadcom Brocade Sannav

The PostgreSQL implementation in Brocade SANnav versions prior to 2.3.0a is vulnerable to an incorrect local authentication flaw. An attacker accessing the VM where the Brocade SANnav is installed can gain access to sensitive data inside the PostgreSQL database.

Brocade Sannav Brocade Brocade Sannav Broadcom Brocade Sannav Broadcom Brocade Sannav 2.3.1

Brocade SANnav before v2.2.1 logs usernames and encoded passwords in debug-enabled logs. The vulnerability could allow an attacker with admin privilege to read sensitive information.

Brocade Brocade Sannav Broadcom Brocade Sannav

Brocade SANnav before v2.3.0 and v2.2.2a stores SNMPv3 Authentication passwords in plaintext. A privileged user could retrieve these credentials with knowledge and access to these log files. SNMP credentials could be seen in SANnav SupportSave if the capture is performed after an...

Brocade Brocade Sannav Broadcom Brocade Sannav

Webtools in Brocade SANnav before version 2.1.1 allows unauthenticated users to make requests to arbitrary hosts due to a misconfiguration; this is commonly referred to as Server-Side Request Forgery (SSRF).

Broadcom Sannav

Brocade SANnav before version SANnav 2.2.0 logs the REST API Authentication token in plain text.

Broadcom Sannav

In Brocade SANnav before Brocade SANnav 2.2.0, multiple endpoints associated with Zone management are susceptible to SQL injection, allowing an malicious user to run arbitrary SQL commands.

Broadcom Sannav

Brocade SANnav before SANnav 2.2.0 application uses the Blowfish symmetric encryption algorithm for the storage of passwords. This could allow an authenticated malicious user to decrypt stored account passwords.

Broadcom Sannav

Brocade SANnav before version 2.1.1 logs account credentials at the ‘trace’ logging level.

Broadcom Sannav

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook