2634 matches found
Plaintext security passwords are logged in the audit logs while executing openssl cmd (CVE-2025-4662)
Brocade SANnav before SANnav 2.4.0a logs plaintext passphrases in the Brocade SANnav host server audit logs while executing OpenSSL command using a passphrase from the command line or while providing the passphrase through a temporary file. These audit logs are the local server VM’s audit logs an...
Cleartext storage of sensitive information in Brocade SANnav server audit logs. (CVE-2025-6390)
Brocade SANnav before SANnav 2.4.0a logs passwords and pbe keys in the Brocade SANnav server audit logs after installation and under specific conditions. These audit logs are the local server VM’s audit logs and are not controlled by SANnav. These logs are only visible to the server admin of the...
Oracle Java SE Multiple Vulnerabilities (April 2025)
Oracle Java SE Multiple Vulnerabilities April 2025 CVE-2025-23083 CVSS 3.1 Base Score 7.7 CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N Brocade SANnav not affected: VEX Justification: Vulnerablecodecannotbecontolledbyadversary CVE-2024-54534 CVSS 3.1 Base Score 7.5 CVSS Vector:...
Azul Zulu Java Multiple Vulnerabilities (January 2025)
Azul Zulu Multiple Vulnerabilities January 2025 CVE-2025-0509 CVSS 3.1 Base Score 7.3 CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H Brocade SANnav not affected: VEX Justification: Vulnerablecodenotpresent CVE-2025-21502 CVSS 3.1 Base Score 4.8 CVSS Vector:...
Multiple Rocky Linux updates applied to Brocade SANnav OVA 2.4.0a
Multiple Rocky Linux updates applied to Brocade SANnav base OS OVA deployment 2.4.0a RockyLinux 8: bind RLSA-2024:5524 BIND's database will be slow if a very large number of RRs exist at the same name CVE-2024-1737 SIG0 can be used to exhaust CPU resources CVE-2024-1975 RockyLinux 8: bind...
Broadcom Brocade FabricOS Detection
Binary data brocadefabricosdetect.nbin...
Brocade Fabric OS 9.1.x < 9.1.1d7 RCE (BSA-2025-2930)
The version of Brocade FabricOS installed on the remote host is 9.1.x prior to 9.1.1d7. It is, therefore, affected by a remote code execution vulnerability as referenced in the BSA-2025-2930 advisory: - Brocade Fabric OS versions starting with 9.1.0 have root access removed, however, a local user...
CVE-2025-4661
A path transversal vulnerability in Brocade Fabric OS 9.1.0 through 9.2.2 could allow a local admin user to gain access to files outside the intended directory potentially leading to the disclosure of sensitive information. Note: Admin level privilege is required on the switch in order to exploit...
CVE-2025-4661
A path transversal vulnerability in Brocade Fabric OS 9.1.0 through 9.2.2 could allow a local admin user to gain access to files outside the intended directory potentially leading to the disclosure of sensitive information. Note: Admin level privilege is required on the switch in order to exploit...
CVE-2025-4661 Path transversal vulnerability potentially leading to sensitive information disclosure
A path transversal vulnerability in Brocade Fabric OS 9.1.0 through 9.2.2 could allow a local admin user to gain access to files outside the intended directory potentially leading to the disclosure of sensitive information. Note: Admin level privilege is required on the switch in order to exploit...
CVE-2025-4661 Path transversal vulnerability potentially leading to sensitive information disclosure
A path transversal vulnerability in Brocade Fabric OS 9.1.0 through 9.2.2 could allow a local admin user to gain access to files outside the intended directory potentially leading to the disclosure of sensitive information. Note: Admin level privilege is required on the switch in order to exploit...
CVE-2025-4661
CVE-2025-4661 is a path traversal vulnerability in Brocade Fabric OS 9.1.0 through 9.2.2 that could let a local admin access files outside the intended directory, potentially leading to sensitive information disclosure. Exploitation requires admin privileges on the switch. Connected sources confi...
CVE-2025-4661: Improper Limitation of a Pathname to a Restricted Directory
A path transversal vulnerability in Brocade Fabric OS 9.1.0 through 9.2.2 could allow a local admin user to gain access to files outside the intended directory potentially leading to the disclosure of sensitive information. Note: Admin level privilege is required on the switch in order to exploit...
PT-2025-28645
Name of the Vulnerable Software and Affected Versions: Brocade Fabric OS versions 9.0.0 through 9.2.2 Description: The issue is related to an Improper Check for Unusual or Exceptional Conditions, which could allow an authenticated, network-based attacker to cause a Denial-of-Service DoS. This...
PT-2025-26201
Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions 9.1.0 through 9.2.2 Description A path traversal issue could allow a local admin user to gain access to files outside the intended directory, potentially leading to the disclosure of sensitive information. Admin leve...
Path transversal vulnerability potentially leading to sensitive information disclosure (CVE-2025-4661)
A path transversal vulnerability in Brocade Fabric OS 9.1.0 through 9.2.2 could allow a local admin user to gain access to files outside the intended directory potentially leading to the disclosure of sensitive information. Note: Admin level privilege is required on the switch in order to exploit...
Denial-of-Service (DoS) after Unusual or Exceptional Conditions vulnerability (CVE-2025-4663)
An Improper Check for Unusual or Exceptional Conditions vulnerability in Brocade Fabric OS before 9.2.2.a could allow an authenticated, network-based attacker to cause a Denial-of-Service DoS. The vulnerability is encountered when supportsave is invoked remotely, using ssh command or SANnav inlin...
HPESBST04879 rev.2 - HPE SAN Switches with Brocade Fabric OS (FOS), Multiple Vulnerabilities
Potential Security Impact: Local: Arbitrary Code Execution, Denial of Service DoS, Directory Traversal SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE B-series SN6750B Fibre Channel Switch - Prior to 9.2.1c and 9.2.2a HPE SN8700B 4-slot SAN Director Switch - Prior to 9.2.1c an...