SB2023083165 - Cleartext storage of sensitive information in Brocade SANnav
Published: August 31, 2023 Updated: May 21, 2025
Security Bulletin ID
SB2023083165
Severity
High
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Information disclosure
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Cleartext storage of sensitive information (CVE-ID: CVE-2023-31925)
The vulnerability allows a remote user to gain access to potentially sensitive information.
The vulnerability exists due to Brocade SANnav stores SNMPv3 Authentication passwords in plaintext. A remote user could retrieve these credentials with knowledge and access to these log files. SNMP credentials could be seen in SANnav SupportSave if the capture is performed after an SNMP configuration failure causes an SNMP communication log dump.
Remediation
Install update from vendor's website.