#VU109607 Cleartext storage of sensitive information in Brocade SANnav - CVE-2023-31925

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU109607

#VU109607 Cleartext storage of sensitive information in Brocade SANnav - CVE-2023-31925

Published: May 21, 2025


Vulnerability identifier: #VU109607
Vulnerability risk: High
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Amber
CVE-ID: CVE-2023-31925
CWE-ID: CWE-312
Exploitation vector: Remote access
Exploit availability: No public exploit available
Vulnerable software:
Brocade SANnav
Software vendor:
Brocade

Description

The vulnerability allows a remote user to gain access to potentially sensitive information.

The vulnerability exists due to Brocade SANnav stores SNMPv3 Authentication passwords in plaintext. A remote user could retrieve these credentials with knowledge and access to these log files. SNMP credentials could be seen in SANnav SupportSave if the capture is performed after an SNMP configuration failure causes an SNMP communication log dump.


Remediation

Install updates from vendor's website.

External links