Lucene search
+L

737 matches found

CNNVD
CNNVD
added 2024/04/19 12:00 a.m.12 views

Broadcom Brocade SANnav 日志信息泄露漏洞

Broadcom Brocade SANnav is a suite of SAN management platforms from Broadcom Corporation USA. A security vulnerability exists in Brocade SANnav versions v2.3.1 and v2.3.0a, which originated from printing the Brocade Fabric OS switch encryption passwords in the support saves of the Brocade SANnav...

8.6CVSS9.3AI score0.00476EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/04/19 12:00 a.m.8 views

Broadcom Brocade SANnav 信任管理问题漏洞

Broadcom Brocade SANnav is a suite of SAN management platforms from Broadcom Corporation USA. A security vulnerability exists in Brocade SANnav versions v2.3.1 and v2.3.0a, which stems from the fact that the SSH key within the OVA image is hardcoded and is the same in the VM every time SANnav is...

7.5CVSS9.2AI score0.0031EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/04/19 12:00 a.m.7 views

Broadcom Brocade SANnav 加密问题漏洞

Broadcom Brocade SANnav is a suite of SAN management platforms from Broadcom USA. A security vulnerability exists in Brocade SANnav version v2.2.2, which stems from the fact that when Brocade SANnav is upgraded from v2.2.2 to 2.3.0, a TLS/SSL weak message authentication code password is added to...

7.5CVSS9.6AI score0.0029EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/04/19 12:00 a.m.9 views

Broadcom Brocade SANnav 日志信息泄露漏洞

Broadcom Brocade SANnav is a suite of SAN management platforms from Broadcom USA. A security vulnerability exists in Brocade SANnav versions v2.3.1 and v2.3.0a, which stems from an encryption key being stored in the DR log file when the server is configured in disaster recovery mode. This could...

7.5CVSS9.1AI score0.00301EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/04/19 12:00 a.m.7 views

PT-2024-23171 · Brocade · Brocade Sannav Ova

Name of the Vulnerable Software and Affected Versions: Brocade SANnav OVA versions prior to 2.3.1 Brocade SANnav OVA version 2.3.0a Description: The issue is related to an insecure file permission setting that makes files world-readable. This could allow a local user without the required privileg...

5.5CVSS6.6AI score0.00183EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/04/19 12:00 a.m.11 views

PT-2024-23170 · Brocade · Brocade Sannav

Name of the Vulnerable Software and Affected Versions: Brocade SANnav versions prior to 2.3.1 Brocade SANnav version 2.3.0a Description: The issue allows a Brocade SANnav service to send ping commands in the background at regular intervals to gridgain.com to check if updates are available for the...

8.2CVSS7.6AI score0.00756EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2024/04/19 12:00 a.m.21 views

Broadcom Brocade SANnav 安全漏洞

Broadcom Brocade SANnav is a suite of SAN management platforms from Broadcom USA. A security vulnerability exists in Brocade SANnav versions v2.3.1 and v2.3.0a, which stems from Docker instances having an insecure architecture and configuration, resulting in multiple vulnerabilities. the Docker...

6.5CVSS9.3AI score0.0052EPSS
SaveExploits0References2
NVD
NVD
added 2024/04/18 2:15 a.m.22 views

CVE-2024-29956

A vulnerability in Brocade SANnav before v2.3.1 and v2.3.0a prints the Brocade SANnav password in clear text in supportsave logs when a user schedules a switch Supportsave from Brocade SANnav...

6.5CVSS6.5AI score0.00284EPSS
SaveExploits0References1
OSV
OSV
added 2024/04/18 2:15 a.m.8 views

CVE-2024-29956

A vulnerability in Brocade SANnav before v2.3.1 and v2.3.0a prints the Brocade SANnav password in clear text in supportsave logs when a user schedules a switch Supportsave from Brocade SANnav...

6.5CVSS5.8AI score0.00284EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/04/18 1:00 a.m.33 views

CVE-2024-29956 cleartext password in supportsave logs when a user schedules a switch Supportsave from Brocade SANnav

A vulnerability in Brocade SANnav before v2.3.1 and v2.3.0a prints the Brocade SANnav password in clear text in supportsave logs when a user schedules a switch Supportsave from Brocade SANnav...

6.5CVSS6.7AI score0.00284EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/18 1:00 a.m.77 views

CVE-2024-29956

Summary: CVE-2024-29956 affects Brocade SANnav prior to v2.3.1 and v2.3.0a, where the Brocade SANnav password is printed in clear text in supportsave logs when a user schedules a switch Supportsave. This disclosure comes from multiple sources in the Connected documents, including the NVD/NVD-deri...

6.5CVSS6.9AI score0.00284EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/04/18 1:00 a.m.15 views

CVE-2024-29956 cleartext password in supportsave logs when a user schedules a switch Supportsave from Brocade SANnav

A vulnerability in Brocade SANnav before v2.3.1 and v2.3.0a prints the Brocade SANnav password in clear text in supportsave logs when a user schedules a switch Supportsave from Brocade SANnav...

6.5CVSS7AI score0.00284EPSS
SaveExploits0References1
HPE Security Bulletins
HPE Security Bulletins
added 2024/04/18 12:00 a.m.15 views

HPESBST04631 rev.1 - HPE B-Series SANnav Management Portal, Multiple Vulnerabilities

Potential Security Impact: Local: Unauthorized Access to Files; Remote: Arbitrary File Modification, Denial of Service DoS, Directory Traversal, Disclosure of Information, Disclosure of Sensitive Information, Gain Privileged Access, SQL Injection, Unauthenticated Arbitrary Code Execution,...

9.8CVSS6.7AI score0.02057EPSS
SaveExploits1
CNNVD
CNNVD
added 2024/04/18 12:00 a.m.10 views

Broadcom Brocade SANnav 安全漏洞

Broadcom Brocade SANnav is a suite of SAN management platforms from Broadcom USA. A security vulnerability exists in Broadcom Brocade SANnav versions v2.3.1 and v2.3.0a, which originates from printing the Brocade SANnav password in plaintext in the supportsave log when a user switches supportsave...

6.5CVSS9.1AI score0.00284EPSS
SaveExploits0References2
OSV
OSV
added 2024/04/17 10:15 p.m.11 views

CVE-2024-29955

A vulnerability in Brocade SANnav before v2.3.1 and v2.3.0a could allow a privileged user to print the SANnav encrypted key in PostgreSQL startup logs. This could provide attackers with an additional, less-protected path to acquiring the encryption key...

5.5CVSS7.3AI score0.00112EPSS
SaveExploits0References1
NVD
NVD
added 2024/04/17 10:15 p.m.31 views

CVE-2024-29955

A vulnerability in Brocade SANnav before v2.3.1 and v2.3.0a could allow a privileged user to print the SANnav encrypted key in PostgreSQL startup logs. This could provide attackers with an additional, less-protected path to acquiring the encryption key...

5.5CVSS5AI score0.00112EPSS
SaveExploits0References1
OSV
OSV
added 2024/04/17 10:15 p.m.10 views

CVE-2024-29952

A vulnerability in Brocade SANnav before v2.3.1 and v2.3.0a could allow an authenticated user to print the Auth, Priv, and SSL key store passwords in unencrypted logs by manipulating command variables...

5.5CVSS7.3AI score0.00112EPSS
SaveExploits0References1
NVD
NVD
added 2024/04/17 10:15 p.m.39 views

CVE-2024-29952

A vulnerability in Brocade SANnav before v2.3.1 and v2.3.0a could allow an authenticated user to print the Auth, Priv, and SSL key store passwords in unencrypted logs by manipulating command variables...

5.5CVSS5.5AI score0.00112EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/04/17 10:11 p.m.12 views

CVE-2024-29955 Insertion of Sensitive Information into Brocade SANnav Log File

A vulnerability in Brocade SANnav before v2.3.1 and v2.3.0a could allow a privileged user to print the SANnav encrypted key in PostgreSQL startup logs. This could provide attackers with an additional, less-protected path to acquiring the encryption key...

5CVSS6.7AI score0.00112EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/04/17 10:11 p.m.31 views

CVE-2024-29955 Insertion of Sensitive Information into Brocade SANnav Log File

A vulnerability in Brocade SANnav before v2.3.1 and v2.3.0a could allow a privileged user to print the SANnav encrypted key in PostgreSQL startup logs. This could provide attackers with an additional, less-protected path to acquiring the encryption key...

5CVSS5.3AI score0.00112EPSS
SaveExploits0References1
Rows per page
Query Builder