PT-2026-5694 · Brocade · Brocade Sannav

CVE-2025-12679 · Publicado 2026-02-02 · Atualizado 2026-03-03

Positive Technologies (AI Summary)

CVSS v4.0

7.1

Alta

Vetor base

AV:L/AC:L/AT:N/PR:H/UI:P/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions Brocade SANnav versions prior to 2.4.0b

Description A flaw exists in Brocade SANnav that results in the Password-Based Encryption (PBE) key being printed in plaintext within the system audit log file. This could allow a remote authenticated attacker with access to the audit logs to obtain the PBE key. The issue is triggered during a migration process and does not affect new installations. Access to the system audit logs is restricted to a privileged user on the server, and these logs are not controlled by SANnav.

Recommendations Update Brocade SANnav to version 2.4.0b or later.

Correção

Cleartext Storage of Sensitive Information

Enumeração de Fraquezas

CWE-312

Identificadores relacionados

CVE-2025-12679

Produtos afetados

Brocade Sannav

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-12679 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2025-12679 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2018465519897112787 · Publicação no Twitter
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36845 · Aviso do Fabricante
• https://t.me/cveNotify/153870 · Publicação no Telegram