broadcom brocade sannav - vulnerabilities and exploits

(subscribe to this query)

Brocade SANnav before version 2.1.1 contains an Improper Authentication vulnerability that allows cleartext transmission of authentication credentials of the jmx server.

Broadcom Sannav

Brocade SANNav before version 2.1.1 contains an information disclosure vulnerability. Successful exploitation of internal server information in the initial login response header.

Broadcom Sannav

The host SSH servers of Brocade Fabric OS before Brocade Fabric OS v7.4.2h, v8.2.1c, v8.2.2, v9.0.0, and Brocade SANnav before v2.1.1 utilize keys of less than 2048 bits, which may be vulnerable to man-in-the-middle attacks and/or insecure SSH communications.

Broadcom Brocade Sannav Broadcom Fabric Operating System Broadcom Fabric Operating System 7.4.2 Broadcom Fabric Operating System 7.4.2a Broadcom Fabric Operating System 7.4.2b Broadcom Fabric Operating System 7.4.2c Broadcom Fabric Operating System 7.4.2d Broadcom Fabric Operating System 7.4.2f Broadcom Fabric Operating System 7.4.2g Broadcom Fabric Operating System 8.2.1 Broadcom Fabric Operating System 8.2.1a Broadcom Fabric Operating System 8.2.1b

The OVA version of Brocade SANnav before version 2.1.1 installation with IPv6 networking exposes the docker container ports to the network, increasing the potential attack surface.

Broadcom Sannav

Brocade SANnav before SANnav 2.2.0 application uses the Blowfish symmetric encryption algorithm for the storage of passwords. This could allow an authenticated malicious user to decrypt stored account passwords.

Broadcom Sannav

Webtools in Brocade SANnav before version 2.1.1 allows unauthenticated users to make requests to arbitrary hosts due to a misconfiguration; this is commonly referred to as Server-Side Request Forgery (SSRF).

Broadcom Sannav

Brocade SANnav before version 2.1.1 allows an authenticated malicious user to list directories, and list files without permission. As a result, users without permission can see folders, and hidden files, and can create directories without permission.

Broadcom Sannav

A vulnerability in the role-based access control (RBAC) functionality of the Brocade SANNav prior to 2.2.0 could allow an authenticated, remote malicious user to access resources that they should not be able to access and perform actions that they should not be able to perform. T...

Broadcom Sannav

JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration or if the configuration references an LDAP service the attacker has access to. The attacker can provide a TopicConnectionFactoryBi...

Apache Log4j Netapp Snapmanager -Broadcom Brocade Sannav -Qos Reload4j Oracle Advanced Supply Chain Planning 12.1 Oracle Advanced Supply Chain Planning 12.2 Oracle Business Intelligence 5.9.0.0.0 Oracle Business Intelligence 12.2.1.3.0 Oracle Business Intelligence 12.2.1.4.0 Oracle Business Process Management Suite 12.2.1.3.0 Oracle Business Process Management Suite 12.2.1.4.0 Oracle Communications Eagle Ftp Table Base Retrieval 4.5

2 Articles

By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout. The message converter, %m, is likely to always be included. This allows malicious users to manipulate the SQL by ent...

Apache Log4j Netapp Snapmanager -Broadcom Brocade Sannav -Qos Reload4j Oracle Advanced Supply Chain Planning 12.1 Oracle Advanced Supply Chain Planning 12.2 Oracle Business Intelligence 5.9.0.0.0 Oracle Business Intelligence 12.2.1.3.0 Oracle Business Intelligence 12.2.1.4.0 Oracle Business Process Management Suite 12.2.1.3.0 Oracle Business Process Management Suite 12.2.1.4.0 Oracle Communications Eagle Ftp Table Base Retrieval 4.5

2 Github repositories1 Article

« PREV 1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook