CVE-2024-29952CWE-312

Clear text storage of sensistive information by manipulating command variables

Medium · published April 17, 2024

CVSS v3.1
5.5
EPSS
0%
Percentile
1.3
In the wild
Unconfirmed
What it is

A vulnerability in Brocade SANnav before v2.3.1 and v2.3.0a could allow an authenticated user to print the Auth, Priv, and SSL key store passwords in unencrypted logs by manipulating command variables.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00112 · 1.3th percentile
Weakness
CWE-312 · Cleartext Storage of Sensitive Information
Published
2024-04-17T21:43Z
EPSS history
Timeline
  • 17 APR 21:43Z
    Clear text storage of sensistive information by manipulating command variables
    cvelistv5