PT-2024-11668

Name of the Vulnerable Software and Affected Versions Brocade SANnav versions prior to 2.2.2 Description An information exposure through log file vulnerability exists, where configuration secrets are logged in the supportsave file. This file is generated by an admin user during troubleshooting of...

PT-2024-11670

Name of the Vulnerable Software and Affected Versions Brocade SANnav versions prior to 2.2.2 Description An information exposure through log file vulnerability exists, where Brocade Fabric OS Switch passwords and authorization IDs are printed in the embedded MLS DB file. Recommendations For...

PT-2024-11669

Name of the Vulnerable Software and Affected Versions Brocade SANnav versions prior to 2.2.2 Description The issue concerns the use of weak key exchange algorithms on several ports, including 24, 6514, 18023, 19094, and 19095. Recommendations For Brocade SANnav versions prior to 2.2.2, update to...

PT-2024-11671

Name of the Vulnerable Software and Affected Versions Brocade SANnav versions prior to 2.2.2 Description The issue concerns the logging of Brocade Fabric OS switch passwords when debugging is enabled. This could potentially expose sensitive information. Recommendations For Brocade SANnav versions...

PT-2024-11672

Name of the Vulnerable Software and Affected Versions Brocade SANnav versions prior to 2.3.0 Brocade SANnav version 2.2.2 and earlier Description The issue concerns a possible information exposure through a log file vulnerability. Sensitive fields are recorded in the debug-enabled logs when...

The vulnerability of the Docker Daemon software for managing Brocade SANnav networks allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Docker Daemon software for managing Brocade SANnav networks is related to the improper assignment of permissions to a critical resource. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Docker software component for managing Brocade SANnav networks allows a hacker to read or modify protected information.

The vulnerability of the Docker software for network management in Brocade SANnav relates to the improper use of standard permissions. Exploiting this vulnerability could allow an attacker to read or modify protected information...

The vulnerability of the software backup function for Brocade SANnav network management systems allows a intruder to gain unauthorized access to protected information.

The vulnerability of the software backup function for Brocade SANnav management involves the insecure storage of confidential information. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

SFTP/FTP password could be captured in plain text in Supportsave generated from SANnav

Brocade Fabric OS versions before 8.2.3e2, versions 9.0.0 through 9.2.0c, and 9.2.1 through 9.2.1a can capture the SFTP/FTP server password used for a firmware download operation initiated by SANnav or through WebEM in a weblinker core dump that is later captured via supportsave. Description The...

Oracle Critical Patch Update Advisory - January 2024 (CVE-2024-20952, CVE-2024-20945, CVE-2024-20926, CVE-2024-20921, CVE-2024-20919, CVE-2024-20918)

Brocade SANnav has provided a Security update for the JAVA vulnerabilities below. CVE-2024-20952 CVE-2024-20945 CVE-2024-20926 CVE-2024-20921 CVE-2024-20919 CVE-2024-20918...

GridGain Security update in Brocade SANnav version 2.3.1a (CVE-2023-32732, CVE-2023-34462, CVE-2023-33953, CVE-2023-40167, CVE-2023-36479, CVE-2023-41900, CVE-2022-2048, CVE-2023-26048, CVE-2023-26049)

Brocade has provided a Security update to the following GridGain related CVEs in Brocade SANnav version 2.3.1a. CVE-2023-32732, CVE-2023-34462, CVE-2023-33953, CVE-2023-40167, CVE-2023-36479, CVE-2023-41900, CVE-2022-2048, CVE-2023-26048, CVE-2023-26049 Products Confirmed Not Affected. Brocade...

PT-2025-6496 · Brocade · Brocade Sannav

Name of the Vulnerable Software and Affected Versions: Brocade SANnav versions prior to 2.3.1b Description: The issue allows an authenticated, local attacker to view sensitive information in clear text, including passwords and SNMP responses that contain AuthSecret and PrivSecret. This can occur...

Brocade SANnav Vulnerability Disclosures

Brocade Security Advisories posted on October 6, 2026 CVEs addressed in SANnav 3.0.0a, 3.0.1 and 3.0.1a CVE-2025-6052 Flaw in how GLib’s GString manages memory when adding data to strings PSIRT Risk: Low https://support.broadcom.com/external/content/SecurityAdvisories/0/39130 CVEs addressed in...

Azul Zulu OpenJDK is affected by multiple vulnerabilities.(2024-04-16).

Azul Zulu multiple vulnerabilities as referenced in the 2024-04-16 advisory. Affected CVEs CVE-2023-41993, CVE-2024-21002, CVE-2024-21004, CVE-2024-21003, CVE-2024-21005, CVE-2024-21011, CVE-2024-21012, CVE-2024-21068, CVE-2024-21085, CVE-2024-21094 CVE | Component| Base Score ---|---|---...

The vulnerability of the TLS/SSL software component used for managing SAN networks in Brocade SANnav systems allows attackers to execute a type of “man-in-the-middle” attack.

The vulnerability of the TLS/SSL software components used for managing SAN networks in Brodage SANnav systems is related to insufficient encryption reliability. Exploiting this vulnerability could allow a remote attacker to carry out a “man-in-the-middle” attack and gain unauthorized access to...

Security Bulletin: SANnav software used by IBM b-type SAN directors and switches is affected by Oracle Java SE vulnerabilities

Summary The SANnav Management Portal and Global View products are affected due to a Jave SE issue. The affected issue has been addressed and can be resolved by applying the SANnav code level listed below. CVE-2023-21930, CVE-2023-21967, CVE-2023-21954, CVE-2023-21939, CVE-2023-21968,...

The vulnerability of the Brocade SANnav network management software lies in the insufficient protection of registration data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Brocade SANnav network management software is related to insufficient protection for registration data. Exploiting this vulnerability can allow an intruder operating remotely to gain unauthorized access to protected information...

The vulnerability of the Brocade SANnav network management software lies in the insufficient protection of operational data, allowing attackers to gain access to the database structure and its contents.

The vulnerability of the Brocade SANnav network management software is related to insufficient protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the database structure and its contents...

The vulnerability of the Brocade SANnav network management software, which stems from the use of strictly encrypted credentials, allows a hacker to perform a Man-in-the-Middle attack and decrypt SSH traffic.

The vulnerability of the Brocade SANnav network management software is related to the use of strictly encrypted authentication credentials. Exploiting this vulnerability allows a remote attacker to perform a Man-in-the-Middle MITM attack and decrypt SSH traffic...

The vulnerability of the Brocade SANnav network management software lies in the fact that protected information is stored in unencrypted form, allowing attackers to disclose the protected information.

The vulnerability of the Brocade SANnav network management software lies in the fact that protected information is stored in unencrypted form. Exploiting this vulnerability could allow an attacker to disclose protected information remotely...