CVE-2026-5047CWE-922

CVE-2026-5047

Medium · published October 8, 2026

CVSS v3.1
5.7
EPSS
0%
Percentile
8.8
In the wild
Unconfirmed
What it is

A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and  authentication tokens in log files. The vulnerability could allow an authenticated attacker with access to the log file including the SANnav supportsave to access the passwords.

The record
Technical detail
CVSS v3.1
5.7 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
8.2 · CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
EPSS
0.00196 · 8.8th percentile
Weakness
CWE-922 · Insecure Storage of Sensitive Information
Published
2026-10-08T10:16Z
Affected products (1)
ProductVersionsFixed in
broadcom/brocade_sannav< 2.4.0b2.4.0b
References (1)
https://support.broadcom.com/external/content/SecurityAdvisories/0/37933 · [email protected]
EPSS history
Timeline
  • 09 OCT 03:29Z
    EPSS moved — → 0%
    epss
  • 08 OCT 05:18Z
    A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and  authentication tokens in log files
    cvelistv5
  • 08 OCT 05:18Z
    A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and  authentication tokens in log files
    cvelistv5