Code injection

2022-06-2718:15:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.5%

JSON

In Brocade SANnav before Brocade SANnav v2.2.0.2 and Brocade SANnav2.1.1.8, encoded scp-server passwords are stored using Base64 encoding, which could allow an attacker able to access log files to easily decode the passwords.

CPENameOperatorVersion
sannavge2.2.0.0
sannavlt2.2.0.2
sannavlt2.1.1.8

Name	Operator	Version
sannav	ge	2.2.0.0
sannav	lt	2.2.0.2
sannav	lt	2.1.1.8

References

security.netapp.com/advisory/ntap-20220627-0003/

www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-1979