CVE-2024-29958

HIGH

Brocade SANnav <2.3.1-2.3.0a - Info Disclosure

Title source: llm

Description

A vulnerability in Brocade SANnav before v2.3.1 and v2.3.0a prints the encryption key in the console when a privileged user executes the script to replace the Brocade SANnav Management Portal standby node. This could provide attackers an additional, less protected path to acquiring the encryption key.

References (1)

Core 1

Core References

Vendor Advisory

https://support.broadcom.com/external/content/SecurityAdvisories/0/23242

Scores

CVSS v3 7.5

EPSS 0.0029

EPSS Percentile 52.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-532

Status published

Products (1)

broadcom/brocade_sannav < 2.3.0a

Published Apr 19, 2024

Tracked Since Feb 18, 2026