PT-2026-5734 · Brocade · Brocade Sannav

CVE-2025-12773 · Publicado 2026-02-03 · Atualizado 2026-03-03

Positive Technologies (AI Summary)

CVSS v4.0

7.1

Alta

Vetor base

AV:L/AC:L/AT:N/PR:H/UI:P/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions Brocade SANnav versions prior to 2.4.0a

Description A flaw exists in the update-reports-purge-settings.sh script logging for Brocade SANnav that could permit the retrieval of the SANnav database password from system audit logs. A remote authenticated attacker with access to these logs could potentially gain access to the database password.

Recommendations Update to version 2.4.0a or later.

Correção

Generation of Error Message Containing Sensitive Information

Enumeração de Fraquezas

CWE-209

Identificadores relacionados

CVE-2025-12773

Produtos afetados

Brocade Sannav

Referências · 5

• https://t.me/cveNotify/153873 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2018497457160860023 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-12773 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2025-12773 · Aviso do Fabricante
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36847 · Aviso do Fabricante