CVE-2024-29957CWE-532

Encryption key is stored in the DR log files

High · published April 19, 2024

CVSS v3.1
7.5
EPSS
0%
Percentile
21.6
In the wild
Unconfirmed
What it is

When Brocade SANnav before v2.3.1 and v2.3.0a servers are configured in Disaster Recovery mode, the encryption key is stored in the DR log files. This could provide attackers with an additional, less-protected path to acquiring the encryption key.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00301 · 21.6th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2024-04-19T03:11Z
EPSS history
Timeline
  • 19 APR 03:11Z
    Encryption key is stored in the DR log files
    cvelistv5