CVE-2022-43933CWE-538

configuration secrets are logged in support-save

Medium · published November 21, 2024

CVSS v3.1
4.4
EPSS
0%
Percentile
16.7
In the wild
Unconfirmed
What it is

An information exposure through log file vulnerability exists in Brocade SANnav before Brocade SANnav 2.2.2, where configuration secrets are logged in supportsave. Supportsave file is generated by an admin user troubleshooting the switch. The Logged information may include usernames and passwords, and secret keys.

The record
Technical detail
CVSS v3.1
4.4 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00260 · 16.7th percentile
Weakness
CWE-538 · Insertion of Sensitive Information into Externally-Accessible File or Directory
Published
2024-11-21T01:36Z
EPSS history
Timeline
  • 21 NOV 01:36Z
    configuration secrets are logged in support-save
    cvelistv5