CVE-2024-29964CWE-732

Brocade SANnav versions before v2.3.0a do not correctly set permissions on files, including docker files

Medium · published April 19, 2024

CVSS v3.1
5.7
EPSS
1%
Percentile
43.3
In the wild
Unconfirmed
What it is

Brocade SANnav versions before v2.3.0a do not correctly set permissions on files, including docker files. An unprivileged attacker who gains access to the server can read sensitive information from these files.

The record
Technical detail
CVSS v3.1
5.7 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00520 · 43.3th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2024-04-19T04:39Z
EPSS history
Timeline
  • 19 APR 04:39Z
    Brocade SANnav versions before v2.3.0a do not correctly set permissions on files, including docker files
    cvelistv5