CVE-2024-2860CWE-306

The PostgreSQL implementation in Brocade SANnav versions before 2.3.0a is vulnerable to an incorrect local authentication flaw

High · published May 8, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
4.9
In the wild
Unconfirmed
What it is

The PostgreSQL implementation in Brocade SANnav versions before 2.3.0a is vulnerable to an incorrect local authentication flaw. An attacker accessing the VM where the Brocade SANnav is installed can gain access to sensitive data inside the PostgreSQL database.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00161 · 4.9th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2024-05-08T01:01Z
EPSS history
Timeline
  • 08 MAY 01:01Z
    The PostgreSQL implementation in Brocade SANnav versions before 2.3.0a is vulnerable to an incorrect local authentication flaw
    cvelistv5