Security features bypass in Brocade SANnav - CVE-2024-29967
Published: April 23, 2024
Vulnerability identifier: #VU88929
CSH Severity: Low
CVSS v4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-29967
CWE-ID: CWE-254
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to compromise the target system.
The vulnerability exists due to an error related to Docker instances inside the appliance having insecure mount points allowing reading and wring access to files. A local administrator can gain read and write access to these files.
Affected software
Brocade SANnav
How to mitigate CVE-2024-29967
Install updates from vendor's website.
Brocade SANnav - addressed in versions 2.3.0a, 2.3.1