CVE-2024-29966CWE-798

hard-coded credentials in the documentation that appear as the appliance root password

High · published April 19, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
50.5
In the wild
Unconfirmed
What it is

Brocade SANnav OVA before v2.3.1 and v2.3.0a contain hard-coded credentials in the documentation that appear as the appliance's root password. The vulnerability could allow an unauthenticated attacker full access to the Brocade SANnav appliance.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00650 · 50.5th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2024-04-19T04:53Z
EPSS history
Timeline
  • 19 APR 04:53Z
    hard-coded credentials in the documentation that appear as the appliance root password
    cvelistv5