VULNERABILITY INTELLIGENCE

CVE-2024-29964

CVSS score5.7 MEDIUM
EPSS probability0.52%
CISA KEVNot currently listed
Published2024-04-19
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

Brocade SANnav versions before v2.3.0a do not correctly set permissions on files, including docker files. An unprivileged attacker who gains access to the server can read sensitive information from these files.

Weakness classification

  • sirt@brocade.com: CWE-732
  • nvd@nist.gov: CWE-732

Primary references