PT-2022-3074 · Brocade · Brocade Sannav
Published
2022-06-22
·
Updated
2022-07-07
·
CVE-2022-28168
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Brocade SANnav versions prior to 2.2.0.2
Brocade SANnav versions prior to 2.1.1.8
Description
The issue is related to the storage of protected information in an unencrypted form. An attacker who gains access to log files can easily decode the passwords, as they are stored using Base64 encoding. This could allow the attacker to obtain access to sensitive information.
Recommendations
For Brocade SANnav versions prior to 2.2.0.2, update to version 2.2.0.2 or later to resolve the issue.
For Brocade SANnav versions prior to 2.1.1.8, update to version 2.1.1.8 or later to resolve the issue.
As a temporary workaround, consider restricting access to log files to minimize the risk of exploitation.
Fix
Cleartext Storage of Sensitive Information
Insufficiently Protected Credentials
Insecure Storage of Sensitive Information
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Brocade Sannav