Lucene search

K
broadcomBroadcom Security ResponseBSNSA23242
HistoryApr 17, 2024 - 12:00 a.m.

Encryption key in the console (CVE-2024-29958)

2024-04-1700:00:00
Broadcom Security Response
support.broadcom.com
12
brocade sannav
vulnerability
encryption key
console
privileged user
script
management portal
standby node
attacker
software

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%

A vulnerability in Brocade SANnav before v2.3.1 and v2.3.0a prints the encryption key in the console when a privileged user executes the script to replace the Brocade SANnav Management Portal standby node. This could provide attackers an additional, less protected path to acquiring the encryption key.

Affected configurations

Vulners
Node
broadcombrocade_sannavRange<2.3.0a
CPENameOperatorVersion
brocade sannavlt2.3.0a

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%

Related for BSNSA23242