PT-2025-29164 · Brocade · Brocade Sannav

Published 2025-07-08 · Updated 2025-08-27 · CVE-2025-4662

Positive Technologies (AI Summary)

CVSS v4.0

5.1

Medium

Base vector

AV:L/AC:L/AT:N/PR:H/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions: Brocade SANnav versions prior to 2.4.0a

Description: Brocade SANnav logs plaintext passphrases in the host server audit logs when executing an OpenSSL command using a passphrase from the command line or through a temporary file. These audit logs are local to the server VM and are not managed by SANnav. Access to these logs is restricted to the server administrator and is not available to SANnav administrators or users.

Recommendations: Update Brocade SANnav to version 2.4.0a or later.

Fix

Weakness Enumeration

CWE-497

Related Identifiers

BDU:2025-09915

CVE-2025-4662

Affected Products

Brocade Sannav

References · 6

• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/35908 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-4662 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-4662 · Security Note
• https://bdu.fstec.ru/vul/2025-09915 · Security Note
• https://t.me/cveNotify/133739 · Telegram Post
• https://twitter.com/CVEnew/status/1943668183573172390 · Twitter Post