CVE-2023-31423CWE-312

Possible information exposure through log file vulnerability

Medium · published August 31, 2023

CVSS v3.1
5.7
EPSS
0%
Percentile
13.0
In the wild
Unconfirmed
What it is

Possible

information exposure through log file vulnerability where sensitive

fields are recorded in the configuration log without masking on Brocade

SANnav before v2.3.0 and 2.2.2a. Notes:

To access the logs, the local attacker must have access to an already collected Brocade SANnav "supportsave"

outputs.

The record
Technical detail
CVSS v3.1
5.7 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00230 · 13.0th percentile
Weakness
CWE-312 · Cleartext Storage of Sensitive Information
Published
2023-08-31T00:43Z
EPSS history
Timeline
  • 31 AUG 00:43Z
    Possible information exposure through log file vulnerability
    cvelistv5