Lucene search
HistoryDec 09, 2022 - 2:15 a.m.
CVE-2022-33187
brocade sannav
debug-enabled logs
admin privilege
sensitive information
4.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
26.9%
Brocade SANnav before v2.2.1 logs usernames and encoded passwords in
debug-enabled logs. The vulnerability could allow an attacker with admin
privilege to read sensitive information.
Affected configurations
Node
broadcombrocade_sannavRange<2.2.1
Related
broadcom
broadcom
cve
cve
CVE-2022-33187
2022-12-09 02:15:09
prion
prion
Information disclosure
2022-12-09 02:15:00
cvelist
cvelist
4.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
26.9%
Related for NVD:CVE-2022-33187