VULNERABILITY INTELLIGENCE

CVE-2023-31423

CVSS score5.7 MEDIUM
EPSS probability0.23%
CISA KEVNot currently listed
Published2023-08-31
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Description

Possible information exposure through log file vulnerability where sensitive fields are recorded in the configuration log without masking on Brocade SANnav before v2.3.0 and 2.2.2a. Notes: To access the logs, the local attacker must have access to an already collected Brocade SANnav "supportsave" outputs.

Weakness classification

  • sirt@brocade.com: CWE-312
  • nvd@nist.gov: CWE-312

Primary references