Lucene search

K
broadcomBroadcom Security ResponseBSA-2022-2126
HistoryNov 08, 2022 - 12:00 a.m.

CVE-2022-43936: Switch passwords in logs

2022-11-0800:00:00
Broadcom Security Response
www.broadcom.com
9
cve-2022-43936
brocade sannav
password exposure
debugging vulnerability
fabric os
privileged user
access control
log security

Brocade SANnav versions before v2.2.2 improperly expose Brocade Fabric OS switch password when debugging is turned on. A local or remote authenticated privileged user with access to logs may gain switch users’ passwords.

Products Affected

Brocade SANnav versions before v2.2.2

Products Confirmed Not Affected

  • No other Brocade Fibre Channel products are affected.

Credit.

This issue was found internally.

**Revision History

Related for BSA-2022-2126