CVE-2024-29965 | BDVDB-2026-232245 Detail
BrocadeBrocade SANnav
Description#
In Brocade SANnav before v2.3.1, and v2.3.0a, it is possible to back up the appliance from the web interface or the command line interface ("SSH"). The resulting backups are world-readable. A local attacker can recover backup files, restore them to a new malicious appliance, and retrieve the passwords of all the switches.
Impact#
CAPEC-37 Retrieve Embedded Sensitive Data
Weaknesses#
- CWE-922 Insecure Storage of Sensitive Information
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.