Lucene search
HistoryApr 25, 2024 - 6:16 a.m.
CVE-2024-4161
cve-2024-4161
brocade sannav
syslog traffic
sensitive information
remote attacker
unauthenticated
8.6 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
6.8 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
9.2%
In Brocade SANnav, before Brocade SANnav v2.3.0, syslog traffic received
clear text. This could allow an unauthenticated, remote attacker to
capture sensitive information.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Brocade SANnav",
"vendor": "Brocade",
"versions": [
{
"status": "affected",
"version": "before v2.3.0"
}
]
}
]Related
broadcom
broadcom
Syslog traffic sent in clear-text (CVE-2024-4161)
2024-04-25 00:00:00
nvd
nvd
CVE-2024-4161
2024-04-25 06:16:01
cvelist
cvelist
CVE-2024-4161 Syslog traffic sent in clear-text
2024-04-25 02:32:08
8.6 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
6.8 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
9.2%
Related for CVE-2024-4161