Code injection

Brocade SANnav before SANnav 2.2.0 application uses the Blowfish symmetric encryption algorithm for the storage of passwords. This could allow an authenticated attacker to decrypt stored account passwords...

CVE-2022-28165

A vulnerability in the role-based access control RBAC functionality of the Brocade SANNav before 2.2.0 could allow an authenticated, remote attacker to access resources that they should not be able to access and perform actions that they should not be able to perform. The vulnerability exists...

CVE-2022-28165

CVE-2022-28165 describes a privilege escalation/ unauthorized access vulnerability in the RBAC implementation of Brocade SANnav prior to version 2.2.0. The issue arises because server-side permission checks are not consistently enforced before processing requests, enabling an authenticated remote...

CVE-2022-28163

In Brocade SANnav before Brocade SANnav 2.2.0, multiple endpoints associated with Zone management are susceptible to SQL injection, allowing an attacker to run arbitrary SQL commands...

CVE-2022-28163

CVE-2022-28163 concerns Brocade SANnav before version 2.2.0. The connected sources confirm a SQL injection vulnerability in multiple endpoints related to Zone Management, allowing an attacker to execute arbitrary SQL commands. The root cause is insecure handling of inputs in the Zone Management e...

CVE-2022-28164

Brocade SANnav before SANnav 2.2.0 application uses the Blowfish symmetric encryption algorithm for the storage of passwords. This could allow an authenticated attacker to decrypt stored account passwords...

CVE-2022-28164

CVE-2022-28164 affects Broadcom/Brocade SANnav prior to version 2.2.0. The issue arises from using the Blowfish symmetric encryption algorithm to store passwords, which could allow an authenticated attacker to decrypt stored account passwords. The advisory records remediation: upgrade to SANnav 2...

PT-2022-18864 · Brocade · Brocade Sannav

Name of the Vulnerable Software and Affected Versions: Brocade SANNav versions prior to 2.2.0 Description: A vulnerability in the role-based access control RBAC functionality could allow an authenticated, remote attacker to access resources that they should not be able to access and perform actio...

CVE-2022-28164: Use of a Broken or Risky Cryptographic Algorithm

Brocade SANnav before SANnav 2.2.0 application uses the Blowfish symmetric encryption algorithm for the storage of passwords. This could allow an authenticated attacker to decrypt stored account passwords...

CVE-2022-28163: Improper Neutralization of Special Elements used in an SQL Command

In Brocade SANnav before Brocade SANnav 2.2.0, multiple endpoints associated with Zone management are susceptible to SQL injection, allowing an attacker to run arbitrary SQL commands...

PT-2022-18863 · Brocade · Brocade Sannav

Name of the Vulnerable Software and Affected Versions: Brocade SANnav versions prior to 2.2.0 Description: The issue concerns the use of the Blowfish symmetric encryption algorithm for storing passwords, which could allow an authenticated attacker to decrypt stored account passwords...

Broadcom Brocade SANnav 安全漏洞

Broadcom Brocade SANnav is a suite of SAN management platforms from Broadcom USA. A security vulnerability exists in Broadcom Brocade SANnav versions prior to 2.2.0, which stems from a lack of server-side restrictions. A remote attacker could exploit the vulnerability to access resources they...

Broadcom Brocade SANnav SQL注入漏洞

Broadcom Brocade SANnav is a suite of SAN management platforms from Broadcom USA. A security vulnerability exists in Brocade SANnav versions prior to 2.2.0, which can be exploited by an attacker to execute arbitrary SQL commands...

Broadcom Brocade SANnav 加密问题漏洞

Broadcom Brocade SANnav is a suite of SAN management platforms from Broadcom USA. A security vulnerability exists in Broadcom Brocade SANnav versions prior to 2.2.0, which stems from the use of the Blowfish symmetric encryption algorithm to store passwords. An attacker could exploit this...

CVE-2022-28165: Undefined Security Weakness

A vulnerability in the role-based access control RBAC functionality of the Brocade SANNav before 2.2.0 could allow an authenticated, remote attacker to access resources that they should not be able to access and perform actions that they should not be able to perform. The vulnerability exists...

HPESBST04282 rev.1 - HPE B-Series SANnav Management Portal, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Code Execution, Disclosure of Sensitive Information, SQL Injection, Unauthorized Access to Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SANnav Management Software 2.1.1x, 2.1.0x, 2.0.0 CVSS Scores: | CVE | CVSS Vector...

BSA-2022-1844

Security Advisory ID : BSA-2022-1844 Component : RBAC Revision : 1.0 A vulnerability in the role-based access control RBAC functionality of the Brocade SANNav before 2.2.0 could allow an authenticated, remote attacker to access resources that they should not be able to access and perform actions...

BSA-2022-1842

Security Advisory ID : BSA-2022-1842 Component : Zone Management Revision : 1.0 In Brocade SANnav before Brocade SANnav 2.2.0, multiple endpoints associated with Zone management are susceptible to SQL injection, allowing an attacker to run arbitrary SQL commands. Affected Products. Brocade SANnav...

BSA-2022-1843

Security Advisory ID : BSA-2022-1843 Component : Password Encryption Revision : 1.0 Brocade SANnav before SANnav 2.2.0 application uses the Blowfish symmetric encryption algorithm for the storage of passwords. This could allow an authenticated attacker to decrypt stored account passwords. Affecte...

BSA-2022-1841

Security Advisory ID : BSA-2022-1841 Component : REST API Revision : 1.0 Brocade SANnav before version SANnav 2.2.0 logs the REST API Authentication token in plain text. Affected Products. Brocade SANnav - Fixed in Brocade SANnav 2.2.0...