CVE-2022-28166

In Brocade SANnav version before SANN2.2.0.2 and Brocade SANNav before 2.1.1.8, the implementation of TLS/SSL Server Supports the Use of Static Key Ciphers ssl-static-key-ciphers on ports 443 & 18082...

Code injection

In Brocade SANnav before Brocade SANnav v2.2.0.2 and Brocade SANnav2.1.1.8, encoded scp-server passwords are stored using Base64 encoding, which could allow an attacker able to access log files to easily decode the passwords...

Code injection

Brocade SANnav before Brocade SANvav v. 2.2.0.2 and Brocade SANanv v.2.1.1.8 logs the Brocade Fabric OS switch password in plain text in asyncjobscheduler-manager.log...

Code injection

In Brocade SANnav version before SANN2.2.0.2 and Brocade SANNav before 2.1.1.8, the implementation of TLS/SSL Server Supports the Use of Static Key Ciphers ssl-static-key-ciphers on ports 443 & 18082...

CVE-2022-28168

In Brocade SANnav before Brocade SANnav v2.2.0.2 and Brocade SANnav2.1.1.8, encoded scp-server passwords are stored using Base64 encoding, which could allow an attacker able to access log files to easily decode the passwords...

CVE-2022-28168

The CVE affects Brocade SANnav before versions v2.2.0.2 and v2.1.1.8. Root cause: SCP-server passwords are stored with Base64 encoding, which is not secure and could be decoded by someone with access to log files. Impact: authoritatively, exposed credentials in logs; practical risk is partial con...

CVE-2022-28167

Brocade SANnav before Brocade SANvav v. 2.2.0.2 and Brocade SANanv v.2.1.1.8 logs the Brocade Fabric OS switch password in plain text in asyncjobscheduler-manager.log...

CVE-2022-28167

Brocade SANnav modules vulnerable to CVE-2022-28167: SANnav before v2.2.0.2 and before v2.1.1.8 log the Fabric OS switch password in plain text to asyncjobscheduler-manager.log. Root cause: sensitive credentials stored in logs, enabling potential disclosure. Affected products/versions: Brocade SA...

CVE-2022-28166

In Brocade SANnav, versions prior to SANN2.2.0.2 and prior to 2.1.1.8 expose TLS/SSL servers that support static key ciphers on ports 443 and 18082. Root cause: use of static key ciphers in the TLS/SSL server implementation. Impact: potential partial confidentiality disclosure; no data integrity ...

CVE-2022-28166

In Brocade SANnav version before SANN2.2.0.2 and Brocade SANNav before 2.1.1.8, the implementation of TLS/SSL Server Supports the Use of Static Key Ciphers ssl-static-key-ciphers on ports 443 & 18082...

Broadcom Brocade SANnav 安全漏洞

Broadcom Brocade SANnav is a suite of SAN management platforms from Broadcom USA. A security vulnerability exists in Broadcom Brocade SANnav versions v2.2.0.2 and v2.1.1.8. An attacker could exploit the vulnerability to access log files to easily decode passwords...

Broadcom Brocade SANnav 加密问题漏洞

Broadcom Brocade SANnav is a SAN management platform from Broadcom Corporation. A security vulnerability exists in Brocade SANnav versions v2.2.0.2 and v2.1.1.8, which stems from the use of static key ciphers ssl-static-key-ciphers on ports 443 and 18082...

Broadcom Brocade SANnav 安全漏洞

Broadcom Brocade SANnav is a suite of SAN management platforms from Broadcom Corporation USA. A security vulnerability exists in Broadcom Brocade SANnav versions v2.2.0.2 and v2.1.1.8, which originates from logging the Brocade Fabric OS switch password in plain text in asyncjobscheduler-manager.l...

The vulnerability of the SCP-server software for managing the SAN Brocade SANnav network allows a intruder to gain access to log files.

The vulnerability of the SCP-server software for managing the SAN Brocade SANnav network is related to the storage of protected information in unencrypted form. Exploiting this vulnerability could allow an attacker to gain access to log files...

The vulnerability of the asyncjobscheduler-manager.log component of the software for managing SAN networks of the Brocade SANnav system allows a attacker to increase their privileges.

The vulnerability of the asyncjobscheduler-manager.log component of the SAN network management software for Brocade SANnav relates to the storage of sensitive information in an unencrypted form. Exploiting this vulnerability could allow an attacker to gain increased privileges...

The vulnerability of the TLS/SSL Server software component for network management in Brocade SANnav allows attackers to enhance their privileges.

The vulnerability of the TLS/SSL Server software component for managing SAN networks in Brocade SANnav systems is related to the presence of static encryption keys on ports 443 and 18082. Exploiting this vulnerability could allow a malicious actor to increase their privileges...

PT-2022-3073 · Brocade · Brocade Sannav +1

Name of the Vulnerable Software and Affected Versions: Brocade SANnav versions prior to 2.2.0.2 Brocade SANnav versions prior to 2.1.1.8 Description: The issue is related to the storage of sensitive information in plain text. Specifically, the Brocade Fabric OS switch password is logged in plain...

BSA-2022-1978

Security Advisory ID : BSA-2022-1978 Component : Password Revision : 1.0 Brocade SANnav before Brocade SANvav v.2.2.0.2 and Brocade SANanv v.2.1.1.8 logs the Brocade Fabric OS switch password in plain text in asyncjobscheduler-manager.log Affected Products Brocade SANnav versions before v2.2.0.2...

BSA-2022-1980

Security Advisory ID : BSA-2022-1980 Component : Oracle Java SE Revision : 1.1 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.01; Oracle GraalVM...

BSA-2022-765

Security Advisory ID : BSA-2022-765 Component : OpenSSL Revision : 1.0 If an application encounters a fatal protocol error and then calls SSLshutdown twice once to send a closenotify, and once to receive one then OpenSSL can respond differently to the calling application if a 0-byte record is...