{"id":"CVE-2024-29968","state":"PUBLISHED","title":"SQL Table names, column names, and SQL queries are collected in DR standby Supportsave","description":"An information disclosure vulnerability exists in Brocade SANnav before v2.3.1 and v2.3.0a when Brocade SANnav instances are configured in disaster recovery mode. SQL Table names, column names, and SQL queries are collected in DR standby Supportsave. This could allow authenticated users to access the database structure and its contents.","publishedAt":"2024-04-19T05:17:57.502Z","updatedAt":"2024-09-18T22:32:12.764Z","severity":{"score":7.7,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","source":"brocade"},"assigner":"brocade","products":["Brocade Brocade SANnav"],"affected":[{"vendor":"Brocade","product":"Brocade SANnav","defaultStatus":"unaffected","versions":[{"version":"before v2.3.1 and v2.3.0a","status":"affected"}]}],"references":["https://support.broadcom.com/external/content/SecurityAdvisories/0/23253"],"weaknesses":["CWE-922"],"ingestedAt":"2026-10-29T20:07:21.467Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/29xxx/CVE-2024-29968.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-29968","state":"PUBLISHED","datePublished":"2024-04-19T05:17:57.502Z","dateUpdated":"2024-09-18T22:32:12.764Z","assignerShortName":"brocade","assignerOrgId":"87b297d7-335e-4844-9551-11b97995a791","dateReserved":"2024-03-22T05:32:26.687Z"},"containers":{"cna":{"title":"SQL Table names, column names, and SQL queries are collected in DR standby Supportsave","descriptions":[{"lang":"en","value":"An information disclosure vulnerability exists in Brocade SANnav before v2.3.1 and v2.3.0a when Brocade SANnav instances are configured in disaster recovery mode. SQL Table names, column names, and SQL queries are collected in DR standby Supportsave. This could allow authenticated users to access the database structure and its contents."}],"affected":[{"vendor":"Brocade","product":"Brocade SANnav","defaultStatus":"unaffected","versions":[{"version":"before v2.3.1 and v2.3.0a","status":"affected"}]}],"references":[{"url":"https://support.broadcom.com/external/content/SecurityAdvisories/0/23253"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.7,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-922","description":"CWE-922 Insecure Storage of Sensitive Information","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"brocade","orgId":"87b297d7-335e-4844-9551-11b97995a791","dateUpdated":"2024-09-18T22:32:12.764Z"},"impacts":[{"capecId":"CAPEC-37","descriptions":[{"lang":"en","value":"CAPEC-37 Retrieve Embedded Sensitive Data"}]}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2024-29968","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-04-19T17:40:47.516019Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-06-04T17:56:46.782Z"}},{"title":"CVE Program Container","references":[{"url":"https://support.broadcom.com/external/content/SecurityAdvisories/0/23253","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T01:17:58.610Z"}}]}}}