1901 matches found
CVE-2019-16203
Brocade Fabric OS Versions before v8.2.2a and v8.2.1d could expose the credentials of the remote ESRS server when these credentials are given as a command line option when configuring the ESRS client...
BSA-2020-905
Security Advisory ID : BSA-2020-905 Component : authentication Revision : 1.0: Final Brocade Fabric OS Versions before v7.4.2f, v8.2.2a, v8.1.2j and v8.2.1d could expose external passwords, common secrets or authentication keys used between the switch and an external server. When using certain CL...
BSA-2020-906
Security Advisory ID : BSA-2020-906 Component : authentication Revision : 1.0: Final Brocade Fabric OS Versions before v8.2.2a and v8.2.1d could expose the credentials of the remote ESRS server when these credentials are given as a command line option when configuring the ESRS client. The argumen...
Broadcom Brocade SANnav Trust Management Issues Vulnerability (CNVD-2019-41467)
Broadcom Brocade SANnav is a suite of SAN management platforms from Broadcom USA. A trust management issue vulnerability exists in Broadcom Brocade SANnav versions prior to 2.0, which stems from the program's use of hard-coded passwords. A local attacker could exploit this vulnerability to access...
Broadcom Brocade SANnav Encryption Issue Vulnerability
Broadcom Brocade SANnav is a suite of SAN management platforms from Broadcom USA. A security vulnerability exists in the encryption key generation process in the PBE algorithm of Broadcom Brocade SANnav versions prior to 2.0. An attacker can exploit this vulnerability to decrypt passwords...
Broadcom Brocade SANnav Information Disclosure Vulnerability (CNVD-2019-41466)
Broadcom Brocade SANnav is a suite of SAN management platforms from Broadcom USA. A security vulnerability exists in the authentication mechanism in Broadcom Brocade SANnav versions prior to 2.0. A local attacker could exploit this vulnerability to access sensitive information...
Broadcom Brocade SANnav Security Management Issues Vulnerabilities
Broadcom Brocade SANnav is a suite of SAN management platforms from Broadcom USA. A security vulnerability exists in Broadcom Brocade SANnav versions prior to 2.0. A remote attacker could exploit the vulnerability to brute-force break a valid session ID...
Broadcom Brocade SANnav Information Disclosure Vulnerability
Broadcom Brocade SANnav is a suite of SAN management platforms from Broadcom USA. A log information disclosure vulnerability exists in Broadcom Brocade SANnav versions prior to 2.0. The vulnerability stems from the abnormal output of log files from a network system or product. An attacker could...
Broadcom Brocade SANnav Trust Management Issue Vulnerability
Broadcom Brocade SANnav is a suite of SAN management platforms from Broadcom USA. A trust management issue vulnerability exists in the ReportsTrustManager class in Broadcom Brocade SANnav versions prior to 2.0. The vulnerability stems from the lack of an effective trust management mechanism in th...
CVE-2019-16209
A vulnerability, in The ReportsTrustManager class of Brocade SANnav versions before v2.0, could allow an attacker to perform a man-in-the-middle attack against Secure Sockets LayerSSLconnections...
CVE-2019-16207
Brocade SANnav versions before v2.0 use a hard-coded password, which could allow local authenticated attackers to access a back-end database and gain privileges...
CVE-2019-16206
The authentication mechanism, in Brocade SANnav versions before v2.0, logs plaintext account credentials at the ‘trace’ and the 'debug' logging level; which could allow a local authenticated attacker to access sensitive information...
CVE-2019-16207
Brocade SANnav versions before v2.0 use a hard-coded password, which could allow local authenticated attackers to access a back-end database and gain privileges...
CVE-2019-16209
A vulnerability, in The ReportsTrustManager class of Brocade SANnav versions before v2.0, could allow an attacker to perform a man-in-the-middle attack against Secure Sockets LayerSSLconnections...
CVE-2019-16206
The authentication mechanism, in Brocade SANnav versions before v2.0, logs plaintext account credentials at the ‘trace’ and the 'debug' logging level; which could allow a local authenticated attacker to access sensitive information...
CVE-2019-16208
Password-based encryption PBE algorithm, of Brocade SANnav versions before v2.0, has a weakness in generating cryptographic keys that may allow an attacker to decrypt passwords used with several services Radius, TACAS, etc...
CVE-2019-16210
Brocade SANnav versions before v2.0, logs plain text database connection password while triggering support save...
CVE-2019-16205
A vulnerability, in Brocade SANnav versions before v2.0, could allow remote attackers to brute-force a valid session ID. The vulnerability is due to an insufficiently random session ID for several post-authentication actions in the SANnav portal...
CVE-2019-16208
Password-based encryption PBE algorithm, of Brocade SANnav versions before v2.0, has a weakness in generating cryptographic keys that may allow an attacker to decrypt passwords used with several services Radius, TACAS, etc...