PT-2024-5142 · Brocade · Brocade Sannav

Pierre Bare · Published 2024-04-25 · Updated 2024-04-25 · CVE-2024-4161

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Brocade SANnav versions prior to 2.3.0

Description: The issue is related to the transmission of syslog traffic in clear text, which could allow an unauthenticated, remote attacker to capture sensitive information. This could potentially lead to unauthorized access to protected information.

Recommendations: For versions prior to 2.3.0, update to version 2.3.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the syslog traffic to minimize the risk of exploitation.

Fix

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-310

CWE-319

Related Identifiers

BDU:2024-05689

CVE-2024-4161

Affected Products

Brocade Sannav

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-4161 · Security Note
• https://bdu.fstec.ru/vul/2024-05689 · Security Note
• https://support.broadcom.com/external/content/SecurityAdvisories/0/23284 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-4161 · Vendor Advisory
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/23284 · Note