PT-2025-29166 · Brocade · Brocade Sannav

Published 2025-07-08 · Updated 2025-08-27 · CVE-2025-6390

Positive Technologies (AI Summary)

CVSS v4.0

5.1

Medium

Base vector

AV:L/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions: Brocade SANnav versions prior to 2.4.0a

Description: Brocade SANnav logs passwords and Private Bag Encryption (PBE) keys in the server audit logs after installation and under specific conditions. These logs are part of the local server Virtual Machine (VM) audit logs and are not managed by SANnav. Access to these logs is restricted to the host server administrator and is not available to SANnav administrators or users.

Recommendations: Update Brocade SANnav to version 2.4.0a or later.

Fix

Weakness Enumeration

CWE-497

Related Identifiers

BDU:2025-09914

CVE-2025-6390

Affected Products

Brocade Sannav

References · 7

• https://bdu.fstec.ru/vul/2025-09914 · Security Note
• https://osv.dev/vulnerability/CVE-2025-6390 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-6390 · Security Note
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/35909 · Vendor Advisory
• https://t.me/cveNotify/133732 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1943594570572259366 · Twitter Post
• https://twitter.com/CVEnew/status/1943668181341749457 · Twitter Post