Code injection

2022-06-2718:15:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.4%

JSON

Brocade SANnav before Brocade SANvav v. 2.2.0.2 and Brocade SANanv v.2.1.1.8 logs the Brocade Fabric OS switch password in plain text in asyncjobscheduler-manager.log

CPENameOperatorVersion
sannavge2.2.0.0
sannavlt2.2.0.2
sannavlt2.1.1.8

Name	Operator	Version
sannav	ge	2.2.0.0
sannav	lt	2.2.0.2
sannav	lt	2.1.1.8

References

security.netapp.com/advisory/ntap-20220627-0002/

www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-1978