ZeroHour

CVE-2022-43933

CVSS 3.1
4.4 medium
EPSS
<1%p18
Published
()
Modified
Description

An information exposure through log file vulnerability exists in Brocade SANnav before Brocade SANnav 2.2.2, where configuration secrets are logged in supportsave. Supportsave file is generated by an admin user troubleshooting the switch. The Logged information may include usernames and passwords, and secret keys.

Vendors
broadcom
Products
brocade sannav
Weakness
CWE-538, CWE-532
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

In the news

No ingested article mentions this CVE yet.