CVE-2025-1053CWE-532

Brocade SANnav encryption key is logged in the debug logs

High · published February 14, 2025

CVSS v4.0
8.6
EPSS
0%
Percentile
4.5
In the wild
Unconfirmed
What it is

Under certain error conditions at time of SANnav installation or upgrade, the encryption key can be written into and obtained from a Brocade SANnav supportsave. An attacker with privileged access to the Brocade SANnav database could use the encryption key to obtain passwords used by Brocade SANnav.

The record
Technical detail
CVSS v4.0
8.6 · HIGH
Vector
CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N
EPSS
0.00157 · 4.5th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2025-02-14T03:47Z
EPSS history
Timeline
  • 14 FEB 03:47Z
    Brocade SANnav encryption key is logged in the debug logs
    cvelistv5