Brocade Brocade SANnav
34 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-5769 | < 3.0.1 | A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory sw | MEDIUM 5.6 | 0.1 % | ||
| CVE-2026-5049 | < 3.0.0a | A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a. A local authenticated attacke | MEDIUM 6.9 | 0.2 % | ||
| CVE-2026-5048 | < 3.0.0a | In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an auth | MEDIUM 6.1 | 0.2 % | ||
| CVE-2026-5047 | < 2.4.0b ; 3.0.0 | A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens in log files. The vulnerabilit | HIGH 8.2 | 0.2 % | ||
| CVE-2024-4282 | before 2.3.1b | Weak TLS Ciphers on Brocade SANnav OVA SSH port 22 | HIGH 8.2 | 0.3 % | ||
| CVE-2024-10405 | Brocade SANnav before 2.3.1b | Weak TLS Ciphers on Brocade SANnav port 443 & 18082 | MEDIUM 6.9 | 0.2 % | ||
| CVE-2024-2240 | Brocade SANnav before 2.3.1b | Docker implementation in Brocade SANnav is missing Audit Rules. | HIGH 8.6 | 0.5 % | ||
| CVE-2025-1053 | Brocade SANnav before 2.3.1b | Brocade SANnav encryption key is logged in the debug logs | HIGH 8.6 | 0.2 % | ||
| CVE-2024-10404 | before 2.3.1b | Clear text password seen in switch-asset-collectors-mw in Brocade SANnav supportsave | MEDIUM 5.5 | 0.1 % | ||
| CVE-2024-2860 | before SANnav v2.3.0a | The PostgreSQL implementation in Brocade SANnav versions before 2.3.0a is vulnerable to an incorrect local authentication flaw. An attacker | HIGH 7.8 | 0.2 % | ||
| CVE-2024-2859 | v2.3.0 | By default, SANnav OVA is shipped with root user login enabled (CVE-2024-2859) | HIGH 7.2 | 0.8 % | ||
| CVE-2024-4173 | All Versions | SANnav versions exposes Kafka in the wan interface. | CRITICAL 9.8 | 0.6 % | ||
| CVE-2024-4161 | before v2.3.0 | Syslog traffic sent in clear-text | HIGH 8.6 | 0.5 % | ||
| CVE-2024-4159 | before v2.3.0a | Protection mechanisms | MEDIUM 5.3 | 0.5 % | ||
| CVE-2024-29969 | before v2.3.1, v2.3.0a | TLS/SSL weak message authentication code ciphers are added by default for port 18082 | HIGH 7.5 | 0.3 % | ||
| CVE-2024-29968 | before v2.3.1 and v2.3.0a | SQL Table names, column names, and SQL queries are collected in DR standby Supportsave | HIGH 7.7 | 0.5 % | ||
| CVE-2024-29967 | before Brocade SANnav v2.31 and v2.3.0a | In Brocade SANnav before v2.31 and v2.3.0a, it was observed that Docker instances inside the appliance have insecure mount points | MEDIUM 6.0 | 0.2 % | ||
| CVE-2024-29966 | before v2.3.1 and v2.3.0a | hard-coded credentials in the documentation that appear as the appliance root password | CRITICAL 9.8 | 0.7 % | ||
| CVE-2024-29965 | before v2.3.1, and v2.3.0a | Insecure backup | MEDIUM 6.8 | 0.4 % | ||
| CVE-2024-29964 | before v2.3.0a | Brocade SANnav versions before v2.3.0a do not correctly set permissions on files, including docker files | MEDIUM 6.5 | 0.5 % | ||
| CVE-2024-29962 | before v2.3.1, and v2.3.0a | Insecure file permission setting that makes files world-readable | MEDIUM 5.5 | 0.2 % | ||
| CVE-2024-29963 | before v2.3.1, and v2.3.0a | Brocade SANnav contains hardcoded TLS keys used by Docker | LOW 3.8 | 0.2 % | ||
| CVE-2024-29961 | before v2.3.1 and v2.3.0a | supply-chain attack risk | HIGH 8.2 | 0.8 % | ||
| CVE-2024-29960 | before v2.3.1 and v2.3.0a | Identical SSH keys utilized inside the OVA image (CVE-2024-29960) | HIGH 7.5 | 0.3 % | ||
| CVE-2024-29959 | before v2.3.1 and v2.3.0a | Brocade Fabric OS switch encrypted passwords in the Brocade SANnav Standby node's support save | HIGH 8.6 | 0.5 % | ||
| CVE-2024-29958 | before v2.3.1 and v2.3.0a | Encryption key in the console when a privileged user executes the script to replace the Brocade SANnav Management Portal standby node. | HIGH 7.5 | 0.3 % | ||
| CVE-2024-29957 | before v2.3.1 and v2.3.0a | Encryption key is stored in the DR log files | HIGH 7.5 | 0.3 % | ||
| CVE-2024-29956 | before v2.3.1 and v2.3.0a | cleartext password in supportsave logs when a user schedules a switch Supportsave from Brocade SANnav | MEDIUM 6.5 | 0.3 % | ||
| CVE-2024-29955 | before v2.3.1 and v2.3.0a | Insertion of Sensitive Information into Brocade SANnav Log File | MEDIUM 5.5 | 0.1 % | ||
| CVE-2024-29952 | before v2.3.1 and v2.3.0a | Clear text storage of sensistive information by manipulating command variables | MEDIUM 5.5 | 0.1 % | ||
| CVE-2024-29951 | before v2.3.1 and v2.3.0a | Brocade SANnav has weak encryption in internal SSH ports | MEDIUM 5.7 | 0.2 % | ||
| CVE-2024-29950 | versions before Brocade SANnav v2.3.1, v2.3.0a | Brocade SANnav before v2.3.1, v2.3.0a uses weak encryption | HIGH 7.5 | 0.3 % | ||
| CVE-2023-31925 | Brocade SANnav before v2.3.0 and v2.2.2a | Storage of clear text password in Brocade SANnav | MEDIUM 6.5 | 0.2 % | ||
| CVE-2022-33187 | Brocade SANnav versions before v2.2.1 | Brocade SANnav before v2.2.1 logs usernames and encoded passwords in debug-enabled logs | MEDIUM 5.5 | 0.5 % |