Lucene search

Broadcom Security ResponseBSNSA23247

HistoryApr 17, 2024 - 12:00 a.m.

Hardcoded TLS keys used by Docker (CVE-2024-29963).

2024-04-1700:00:00

Broadcom Security Response

support.broadcom.com

brocade sannav

ova

docker

remote registries

tls

hardcoded keys

mitm

cve-2024-29963

AI Score

8.6

Confidence

High

EPSS

Percentile

9.0%

JSON

Brocade SANnav OVA before v2.3.1, and v2.3.0a, contain hardcoded TLS keys used by Docker.

** **Brocade SANnav doesn’t have access to remote Docker registries, and knowledge of the keys is a minimal risk as SANnav is prevented from communicating with Docker registries

VEX code: Inline_mitigations_already_exist

Affected configurations

Vulners

Node

broadcombrocade_sannavRange<2.3.0a

VendorProductVersionCPE
broadcombrocade_sannav*cpe:2.3:a:broadcom:brocade_sannav:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
broadcom	brocade_sannav	*	cpe:2.3:a:broadcom:brocade_sannav::::::::