Lucene search

K
broadcomBroadcom Security ResponseBSNSA22506
HistoryAug 29, 2023 - 12:00 a.m.

CVE-2023-31925 - Storage of clear text password in Brocade SANnav

2023-08-2900:00:00
Broadcom Security Response
support.broadcom.com
14
brocade sannav
snmpv3
plaintext password

0.0005 Low

EPSS

Percentile

18.1%

Brocade SANnav before v2.3.0 and v2.2.2a stores SNMPv3 Authentication passwords in plaintext. A privileged user could retrieve these credentials with knowledge and access to these log files

SNMP credentials could be seen in SANnav SupportSave if the capture is performed after an SNMP configuration failure causes an SNMP communication log dump.

Affected configurations

Vulners
Node
broadcombrocade_sannavRange<2.30
OR
broadcombrocade_sannavRange<2.2.2a
CPENameOperatorVersion
brocade sannavlt2.30
brocade sannavlt2.2.2a

0.0005 Low

EPSS

Percentile

18.1%

Related for BSNSA22506