Lucene search

K
broadcomBroadcom Security ResponseBSA-2022-2122
HistoryNov 08, 2022 - 12:00 a.m.

CVE-2022-33187 : Brocade SANnav before v2.2.1 logs usernames and encoded passwords in debug-enabled logs

2022-11-0800:00:00
Broadcom Security Response
www.broadcom.com
24
brocade sannav
cve-2022-33187
debug-enabled logs
admin privilege

0.001 Low

EPSS

Percentile

26.9%

Brocade SANnav before v2.2.1 logs usernames and encoded passwords in debug-enabled logs. The vulnerability could allow an attacker with admin privilege to read sensitive information.

Products Affected

Brocade SANnav versions before v2.2.1

Products Confirmed Not Affected

  • No other Brocade Fibre Channel products are affected.

Credit.

This issue was found internally.

**Revision History

0.001 Low

EPSS

Percentile

26.9%

Related for BSA-2022-2122