PT-2026-5734 · Brocade · Sannav

Published 2026-02-03 · Updated 2026-02-03 · CVE-2025-12773

Mitre

CVSS v4.0

7.1

7.1

High

Base vector

AV:L/AC:L/AT:N/PR:H/UI:P/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H

A vulnerability in update-reports-purge-settings.sh script logging for Brocade SANnav before 2.4.0a could allow the collection of SANnav database password in the system audit logs. The vulnerability could allow a remote authenticated attacker with access to the audit logs to access the Brocade SANnav database password.

Fix

Generation of Error Message Containing Sensitive Information

Weakness Enumeration

CWE-209

Related Identifiers

CVE-2025-12773

Affected Products

Sannav

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2025-12773 · Security Note
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36847 · Note