{"id":"CVE-2022-43933","state":"PUBLISHED","title":"configuration secrets are logged in support-save","description":"An information exposure through log file vulnerability exists in Brocade SANnav before Brocade SANnav 2.2.2, where configuration secrets are logged in supportsave. Supportsave file is generated by an admin user troubleshooting the switch. The Logged information may include usernames and passwords, and secret keys.","publishedAt":"2024-11-21T01:36:30.175Z","updatedAt":"2024-11-21T18:01:26.215Z","severity":{"score":4.4,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","source":"brocade"},"assigner":"brocade","products":["Brocade SANnav"],"affected":[{"vendor":"Brocade","product":"SANnav","defaultStatus":"unaffected","versions":[{"version":"before Brocade SANnav 2.2.2","status":"affected"}]}],"references":["https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/21221"],"weaknesses":["CWE-538"],"ingestedAt":"2026-10-29T19:50:43.581Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/43xxx/CVE-2022-43933.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-43933","state":"PUBLISHED","datePublished":"2024-11-21T01:36:30.175Z","dateUpdated":"2024-11-21T18:01:26.215Z","assignerShortName":"brocade","assignerOrgId":"87b297d7-335e-4844-9551-11b97995a791","dateReserved":"2022-10-26T19:34:16.360Z"},"containers":{"cna":{"title":"configuration secrets are logged in support-save","descriptions":[{"lang":"en","value":"An information exposure through log file vulnerability exists in Brocade SANnav before Brocade SANnav 2.2.2, where configuration secrets are logged in supportsave. Supportsave file is generated by an admin user troubleshooting the switch. The Logged information may include usernames and passwords, and secret keys."}],"affected":[{"vendor":"Brocade","product":"SANnav","defaultStatus":"unaffected","versions":[{"version":"before Brocade SANnav 2.2.2","status":"affected"}]}],"references":[{"url":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/21221"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":4.4,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-538","description":"CWE-538: Insertion of Sensitive Information into Externally-Accessible File or Directory","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"brocade","orgId":"87b297d7-335e-4844-9551-11b97995a791","dateUpdated":"2024-11-21T01:52:42.072Z"},"impacts":[{"capecId":"CAPEC-37","descriptions":[{"lang":"en","value":"CAPEC-37: Retrieve Embedded Sensitive Data"}]}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2022-43933","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-11-21T17:55:44.908275Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-11-21T18:01:26.215Z"}}]}}}