Skip to content
CVE PROGRAM SOURCE RECORD5.0 Medium

CVE-2024-29955

Insertion of Sensitive Information into Brocade SANnav Log File

Description

A vulnerability in Brocade SANnav before v2.3.1 and v2.3.0a could allow a privileged user to print the SANnav encrypted key in PostgreSQL startup logs. This could provide attackers with an additional, less-protected path to acquiring the encryption key.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Brocade Brocade SANnav

Default version status: affected

  • before v2.3.1 and v2.3.0aaffected

References