VULNERABILITY INTELLIGENCE

CVE-2022-43933

CVSS score4.4 MEDIUM
EPSS probability0.26%
CISA KEVNot currently listed
Published2024-11-21
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Description

An information exposure through log file vulnerability exists in Brocade SANnav before Brocade SANnav 2.2.2, where configuration secrets are logged in supportsave. Supportsave file is generated by an admin user troubleshooting the switch. The Logged information may include usernames and passwords, and secret keys.

Weakness classification

  • sirt@brocade.com: CWE-538
  • nvd@nist.gov: CWE-532

Primary references