PT-2024-3482 · Brocade · Brocade Sannav

Pierre Barre · Published 2024-04-17 · Updated 2025-02-04 · CVE-2024-29963

Positive Technologies (AI Summary)

CVSS v3.1

3.8

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Brocade SANnav versions prior to 2.3.1 Brocade SANnav version 2.3.0a

Description The issue is related to the use of hardcoded credentials in the software. An attacker could exploit this to gain unauthorized access to protected information. The software does not have access to remote Docker registries.

Recommendations For Brocade SANnav versions prior to 2.3.1, update to version 2.3.1 or later. For Brocade SANnav version 2.3.0a, update to version 2.3.1 or later. As a temporary workaround, consider restricting access to the Docker environment to minimize the risk of exploitation.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

BDU:2024-03783

CVE-2024-29963

Affected Products

Brocade Sannav

References · 10

• https://bdu.fstec.ru/vul/2024-03783 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-29963 · Security Note
• https://support.broadcom.com/external/content/SecurityAdvisories/0/23247 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-29963 · Vendor Advisory
• https://t.me/true_secator/5687 · Telegram Post
• https://t.me/cvenotify/77394 · Telegram Post
• https://t.me/cvenotify/109866 · Telegram Post
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/23247 · Note
• https://t.me/cvenotify/78232 · Telegram Post
• https://twitter.com/XynikIT/status/1783879431821341007 · Twitter Post