Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
4.4

Brocade SANnav Exposes Configuration Secrets in Log Files

CVE-2022-43933 · published 1 year ago
Summary

A security issue exists in outdated Brocade SANnav software where log files contain sensitive information like usernames, passwords, and secret keys. This means unauthorized access to these logs could reveal confidential data. To protect yourself, update to Brocade SANnav 2.2.2 or later.

What to do
  • Update broadcom brocade_sannav to version 2.2.2 or later.
Affected software
VendorProductAffected versions
broadcom brocade_sannav < 2.2.2
cpe:2.3:a:broadcom:brocade_sannav:*:*:*:*:*:*:*:*
Original advisory text
An information exposure through log file vulnerability exists in Brocade SANnav before Brocade SANnav 2.2.2, where configuration secrets are logged in supportsave. Supportsave file is generated by ...
An information exposure through log file vulnerability exists in Brocade SANnav before Brocade SANnav 2.2.2, where configuration secrets are logged in supportsave. Supportsave file is generated by an admin user troubleshooting the switch. The Logged information may include usernames and passwords, and secret keys.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
4.4 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-538Insertion of Sensitive Information into Externally-Accessible File or Directory
CWE-532Insertion of Sensitive Information into Log File
Timeline
Published21 Nov 2024
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2022-43933 · NVD
Track software like this
Free during beta