PT-2024-3186 · Brocade · Brocade Sannav

Published 2024-04-17 · Updated 2025-02-04 · CVE-2024-29959

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Brocade SANnav versions prior to 2.3.1 Brocade SANnav version 2.3.0a

Description The issue is related to the disclosure of information through registration files in the Standby Node Support Save component of Brocade SANnav software for managing SAN networks. Exploitation of this issue may allow a remote attacker to gain unauthorized access to protected information. The vulnerability causes Brocade Fabric OS switch encrypted passwords to be printed in the Brocade SANnav Standby node's support save.

Recommendations For Brocade SANnav versions prior to 2.3.1, update to version 2.3.1 or later. For Brocade SANnav version 2.3.0a, update to a version that includes the necessary security fixes, such as version 2.3.1 or later. As a temporary workaround, consider restricting access to the support save files of the Standby node to minimize the risk of exploitation.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

BDU:2024-03406

CVE-2024-29959

Affected Products

Brocade Sannav

References · 8

• https://bdu.fstec.ru/vul/2024-03406 · Security Note
• https://support.broadcom.com/external/content/SecurityAdvisories/0/23243 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-29959 · Security Note
• https://osv.dev/vulnerability/CVE-2024-29959 · Vendor Advisory
• https://safe-surf.ru/upload/VULN-new/VULN.2024-04-26.1.pdf · Security Note
• https://t.me/cvenotify/77391 · Telegram Post
• https://t.me/cvenotify/109863 · Telegram Post
• https://vuldb.com/?id.261576 · Note