PT-2026-5695 · Brocade · Brocade Sannav

CVE-2025-12680 · Publicado 2026-02-02 · Atualizado 2026-03-03

Positive Technologies (AI Summary)

CVSS v4.0

6.0

Média

Vetor base

AV:L/AC:L/AT:P/PR:H/UI:P/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions Brocade SANnav versions prior to 2.4.0b

Description Brocade SANnav before version 2.4.0b improperly handles database passwords, logging them in clear text on the standby SANnav server following a disaster recovery failover. A remote, authenticated attacker with administrative privileges could potentially access these passwords through SANnav logs or supportsave files.

Recommendations Update to Brocade SANnav version 2.4.0b or later.

Correção

Cleartext Storage of Sensitive Information

Enumeração de Fraquezas

CWE-312

CWE-256

Identificadores relacionados

CVE-2025-12680

Produtos afetados

Brocade Sannav

Referências · 5

• https://osv.dev/vulnerability/CVE-2025-12680 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2018465526750581161 · Publicação no Twitter
• https://t.me/cveNotify/153871 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-12680 · Nota de Segurança
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36844 · Aviso do Fabricante