{"id":"CVE-2026-5047","state":"PUBLISHED","title":"A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and  authentication tokens in log files. The vulnerability could allow an authenticated attacker ","description":"A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and  authentication tokens in log files. The vulnerability could allow an authenticated attacker with access to the log file including the SANnav supportsave to access the passwords.","publishedAt":"2026-10-08T05:18:55.977Z","updatedAt":"2026-10-08T17:55:19.289Z","severity":{"score":8.2,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N","source":"brocade"},"assigner":"brocade","products":["Brocade Brocade SANnav"],"affected":[{"vendor":"Brocade","product":"Brocade SANnav","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"2.4.0b","versionType":"Brocade SANnav"},{"version":"3.0.0","status":"affected","versionType":"Brocade SANnav"}]}],"references":["https://support.broadcom.com/external/content/SecurityAdvisories/0/37933"],"weaknesses":["CWE-922"],"ingestedAt":"2026-10-29T20:12:32.778Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/5xxx/CVE-2026-5047.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-5047","state":"PUBLISHED","datePublished":"2026-10-08T05:18:55.977Z","dateUpdated":"2026-10-08T17:55:19.289Z","assignerShortName":"brocade","assignerOrgId":"87b297d7-335e-4844-9551-11b97995a791","dateReserved":"2026-03-27T16:45:32.682Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and  authentication tokens in log files. The vulnerability could allow an authenticated attacker with access to the log file including the SANnav supportsave to access the passwords."}],"affected":[{"vendor":"Brocade","product":"Brocade SANnav","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"2.4.0b","versionType":"Brocade SANnav"},{"version":"3.0.0","status":"affected","versionType":"Brocade SANnav"}]}],"references":[{"url":"https://support.broadcom.com/external/content/SecurityAdvisories/0/37933"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV4_0":{"attackVector":"ADJACENT","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"PASSIVE","vulnConfidentialityImpact":"HIGH","subConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","subIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","version":"4.0","baseSeverity":"HIGH","baseScore":8.2,"vectorString":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-922","lang":"en","description":"CWE-922: Insecure Storage of Sensitive Information","type":"CWE"}]}],"providerMetadata":{"shortName":"brocade","orgId":"87b297d7-335e-4844-9551-11b97995a791","dateUpdated":"2026-10-08T05:18:55.977Z"},"impacts":[{"capecId":"CAPEC-37","descriptions":[{"lang":"en","value":"CAPEC-37 Retrieve Embedded Sensitive Data"}]}],"solutions":[{"lang":"en","value":"Security update provided in Brocade SANnav 2.4.0b, 3.0.0 and 3.0.1","supportingMedia":[{"type":"text/html","base64":false,"value":"<div>Security update provided in Brocade SANnav 2.4.0b, 3.0.0 and 3.0.1</div>"}]}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 1.0.5"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-10-08T15:14:41.593097Z","id":"CVE-2026-5047","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-10-08T17:55:19.289Z"}}]}}}