CVE-2024-29958CWE-532

Encryption key in the console when a privileged user executes the script to replace the Brocade SANnav Management Portal standby node.

High · published April 19, 2024

CVSS v3.1
7.5
EPSS
0%
Percentile
20.4
In the wild
Unconfirmed
What it is

A vulnerability in Brocade SANnav before v2.3.1 and v2.3.0a prints the encryption key in the console when a privileged user executes the script to replace the Brocade SANnav Management Portal standby node. This could provide attackers an additional, less protected path to acquiring the encryption key.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00290 · 20.4th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2024-04-19T03:15Z
EPSS history
Timeline
  • 19 APR 03:15Z
    Encryption key in the console when a privileged user executes the script to replace the Brocade SANnav Management Portal standby node.
    cvelistv5