CVE-2019-16211

Brocade SANnav versions before v2.1.0, contain a Plaintext Password Storage vulnerability...

CVE-2019-16212

A vulnerability in Brocade SANnav versions before v2.1.0 could allow a remote authenticated attacker to conduct an LDAP injection. The vulnerability could allow a remote attacker to bypass the authentication process...

CVE-2019-16212

A vulnerability in Brocade SANnav versions before v2.1.0 could allow a remote authenticated attacker to conduct an LDAP injection. The vulnerability could allow a remote attacker to bypass the authentication process...

Design/Logic Flaw

Brocade SANnav versions before v2.1.0, contain a Plaintext Password Storage vulnerability...

Authentication flaw

A vulnerability in Brocade SANnav versions before v2.1.0 could allow a remote authenticated attacker to conduct an LDAP injection. The vulnerability could allow a remote attacker to bypass the authentication process...

CVE-2019-16211

Brocade SANnav versions before v2.1.0, contain a Plaintext Password Storage vulnerability...

CVE-2019-16211

CVE-2019-16211 affects Brocade SANnav versions before v2.1.0 and is described as a plaintext password storage vulnerability. Public records in NVD list a CVSS v3.1 base score of 9.8 (CRITICAL) with network access, no privileges, and high confidentiality/integrity/availability impact. Lenovo’s sec...

CVE-2019-16212

CVE-2019-16212 affects Brocade SANnav prior to v2.1.0. The issue allows a remote authenticated attacker to perform an LDAP injection and bypass authentication. Remediation is to upgrade SANnav to version 2.1.0 or higher (as documented by Broadcom/Brocade advisories and Lenovo security notes). If ...

CVE-2019-16212

A vulnerability in Brocade SANnav versions before v2.1.0 could allow a remote authenticated attacker to conduct an LDAP injection. The vulnerability could allow a remote attacker to bypass the authentication process...

CVE-2019-16212: Undefined Security Weakness

A vulnerability in Brocade SANnav versions before v2.1.0 could allow a remote authenticated attacker to conduct an LDAP injection. The vulnerability could allow a remote attacker to bypass the authentication process...

CVE-2019-16211: Insufficiently Protected Credentials

Brocade SANnav versions before v2.1.0, contain a Plaintext Password Storage vulnerability...

BSA-2020-1076

Security Advisory ID : BSA-2020-1076 Component : Database credentials Revision : 1.1 Brocade SANnav versions before v2.1.0, contain a Plaintext Password Storage vulnerability. Database credentials are stored in plaintext in a configuration file. An unauthenticated malicious user with access to th...

BSA-2020-1074

Security Advisory ID : BSA-2020-1074 Component : LDAP injection Revision : 1.0 A vulnerability in Brocade SANnav versions before v2.1.0 could allow a remote authenticated attacker to conduct an LDAP injection. The vulnerability allows a remote attacker to bypass the authentication process. Affect...

Brocade Fabric OS and SANnav Vulnerabilities - Lenovo Support US

No description provided...

Brocade Fabric OS and SANnav Vulnerabilities - Lenovo Support US

Lenovo Security Advisory: LEN-46654 Potential Impact: Privilege escalation, denial of service, information disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2018-6447, CVE-2018-6448, CVE-2018-6449, CVE-2019-16211, CVE-2019-16212, CVE-2020-15369, CVE-2020-15370,...

Broadcom Brocade SANnav Information Disclosure Vulnerability (CNVD-2019-41466)

Broadcom Brocade SANnav is a suite of SAN management platforms from Broadcom USA. A security vulnerability exists in the authentication mechanism in Broadcom Brocade SANnav versions prior to 2.0. A local attacker could exploit this vulnerability to access sensitive information...

Broadcom Brocade SANnav Trust Management Issues Vulnerability (CNVD-2019-41467)

Broadcom Brocade SANnav is a suite of SAN management platforms from Broadcom USA. A trust management issue vulnerability exists in Broadcom Brocade SANnav versions prior to 2.0, which stems from the program's use of hard-coded passwords. A local attacker could exploit this vulnerability to access...

Broadcom Brocade SANnav Security Management Issues Vulnerabilities

Broadcom Brocade SANnav is a suite of SAN management platforms from Broadcom USA. A security vulnerability exists in Broadcom Brocade SANnav versions prior to 2.0. A remote attacker could exploit the vulnerability to brute-force break a valid session ID...

Broadcom Brocade SANnav Trust Management Issue Vulnerability

Broadcom Brocade SANnav is a suite of SAN management platforms from Broadcom USA. A trust management issue vulnerability exists in the ReportsTrustManager class in Broadcom Brocade SANnav versions prior to 2.0. The vulnerability stems from the lack of an effective trust management mechanism in th...

Broadcom Brocade SANnav Information Disclosure Vulnerability

Broadcom Brocade SANnav is a suite of SAN management platforms from Broadcom USA. A log information disclosure vulnerability exists in Broadcom Brocade SANnav versions prior to 2.0. The vulnerability stems from the abnormal output of log files from a network system or product. An attacker could...