PT-2026-5694 · Brocade · Brocade Sannav

Published 2026-02-02 · Updated 2026-03-03 · CVE-2025-12679

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:L/AC:L/AT:N/PR:H/UI:P/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions Brocade SANnav versions prior to 2.4.0b

Description A flaw exists in Brocade SANnav that results in the Password-Based Encryption (PBE) key being printed in plaintext within the system audit log file. This could allow a remote authenticated attacker with access to the audit logs to obtain the PBE key. The issue is triggered during a migration process and does not affect new installations. Access to the system audit logs is restricted to a privileged user on the server, and these logs are not controlled by SANnav.

Recommendations Update Brocade SANnav to version 2.4.0b or later.

Fix

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2025-12679

Affected Products

Brocade Sannav

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-12679 · Security Note
• https://osv.dev/vulnerability/CVE-2025-12679 · Vendor Advisory
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36845 · Vendor Advisory
• https://twitter.com/CVEnew/status/2018465519897112787 · Twitter Post
• https://t.me/cveNotify/153870 · Telegram Post