CVE-2022-43933
21.11.2024, 11:15
An information exposure through log file vulnerability exists in Brocade SANnav before Brocade SANnav 2.2.2, where configuration secrets are logged in supportsave. Supportsave file is generated by an admin user troubleshooting the switch. The Logged information may include usernames and passwords, and secret keys.Enginsight
| Vendor | Product | Version |
|---|---|---|
| broadcom | brocade_sannav | 𝑥 < 2.2.2 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-538 - Insertion of Sensitive Information into Externally-Accessible File or DirectoryThe product places sensitive information into files or directories that are accessible to actors who are allowed to have access to the files, but not to the sensitive information.
- CWE-532 - Insertion of Sensitive Information into Log FileInformation written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.