VULNERABILITY INTELLIGENCE

CVE-2024-29968

CVSS score7.7 HIGH
EPSS probability0.46%
CISA KEVNot currently listed
Published2024-04-19
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Description

An information disclosure vulnerability exists in Brocade SANnav before v2.3.1 and v2.3.0a when Brocade SANnav instances are configured in disaster recovery mode. SQL Table names, column names, and SQL queries are collected in DR standby Supportsave. This could allow authenticated users to access the database structure and its contents.

Weakness classification

  • sirt@brocade.com: CWE-922
  • nvd@nist.gov: CWE-922

Primary references