Lucene search

K
broadcomBroadcom Security ResponseBSNSA22508
HistoryAug 29, 2023 - 12:00 a.m.

CVE-2023-31423 - Possible information exposure through log file vulnerability

2023-08-2900:00:00
Broadcom Security Response
support.broadcom.com
14
information exposure
log file vulnerability
brocade sannav
sensitive fields
configuration log
supportsave(outputs software)

EPSS

0

Percentile

5.1%

Possible information exposure through log file vulnerability where sensitive fields are recorded in the configuration log without masking on Brocade SANnav before v2.3.0 and 2.2.2a.

Notes: To access the logs, the attacker must first collect a “supportsave” on Brocade SANnav or have access to an already collected “supportsave” outputs

Affected configurations

Vulners
Node
broadcombrocade_sannavRange<2.3.0
OR
broadcombrocade_sannavRange<2.2.2a
VendorProductVersionCPE
broadcombrocade_sannav*cpe:2.3:a:broadcom:brocade_sannav:*:*:*:*:*:*:*:*

EPSS

0

Percentile

5.1%