Lucene search

BrocadeCVE-2023-31423

HistoryAug 31, 2023 - 1:15 a.m.

CVE-2023-31423

2023-08-3101:15:07

CWE-312

brocade

web.nvd.nist.gov

cve-2023-31423

information exposure

log file vulnerability

brocade sannav

security

nvd

CVSS3

5.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

AI Score

5.2

Confidence

High

EPSS

Percentile

5.1%

JSON

Possible
information exposure through log file vulnerability where sensitive
fields are recorded in the configuration log without masking on Brocade
SANnav before v2.3.0 and 2.2.2a. Notes:
To access the logs, the local attacker must have access to an already collected Brocade SANnav “supportsave”
outputs.

Affected configurations

Nvd

Node

broadcombrocade_sannavRange<2.2.2a

VendorProductVersionCPE
broadcombrocade_sannav*cpe:2.3:a:broadcom:brocade_sannav:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
broadcom	brocade_sannav	*	cpe:2.3:a:broadcom:brocade_sannav::::::::

CNA Affected

[
  {
    "defaultStatus": "affected",
    "product": "SANnav",
    "vendor": "Brocade",
    "versions": [
      {
        "status": "affected",
        "version": "Brocade SANnav before v2.3.0 and 2.2.2a"
      }
    ]
  }
]

References

security.netapp.com/advisory/ntap-20240229-0003/

support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/22508

CVSS3

5.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

AI Score

5.2

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2023-31423