Vulnerability Details CVE-2024-10404
CalInvocationHandler in Brocade
SANnav before 2.3.1b logs sensitive information in clear text. The
vulnerability could allow an authenticated, local attacker to view
Brocade Fabric OS switch sensitive information in clear text. An
attacker with administrative privileges could retrieve sensitive
information including passwords; SNMP responses that contain AuthSecret
and PrivSecret after collecting a “supportsave” or getting access to an
already collected “supportsave”. NOTE: this issue exists because of an incomplete fix for CVE-2024-29952
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 0.5%
CVSS Severity
CVSS v3 Score 5.5
Products affected by CVE-2024-10404
-
cpe:2.3:a:broadcom:brocade_sannav:-
-
cpe:2.3:a:broadcom:brocade_sannav:1.1.0
-
cpe:2.3:a:broadcom:brocade_sannav:1.1.1
-
cpe:2.3:a:broadcom:brocade_sannav:2.0
-
cpe:2.3:a:broadcom:brocade_sannav:2.1.0
-
cpe:2.3:a:broadcom:brocade_sannav:2.1.1
-
cpe:2.3:a:broadcom:brocade_sannav:2.2.0
-
cpe:2.3:a:broadcom:brocade_sannav:2.2.1
-
cpe:2.3:a:broadcom:brocade_sannav:2.2.2
-
cpe:2.3:a:broadcom:brocade_sannav:2.2.2a
-
cpe:2.3:a:broadcom:brocade_sannav:2.3.0
-
cpe:2.3:a:broadcom:brocade_sannav:2.3.0a
-
cpe:2.3:a:broadcom:brocade_sannav:2.3.1
-
cpe:2.3:a:broadcom:brocade_sannav:2.3.1a