CVE-2024-29965 — Insecure backup
In Brocade SANnav before v2.3.1, and v2.3.0a, it is possible to back up the appliance from the web interface or the command line interface ("SSH"). The resulting backups are wo…
Published: 2024-04-19 · CVSS: 6.8 · CVSS 3.1
In Brocade SANnav before v2.3.1, and v2.3.0a, it is possible to back up the appliance from the web interface or the command line interface ("SSH"). The resulting backups are world-readable. A local attacker can recover backup files, restore them to a new malicious appliance, and retrieve the passwords of all the switches.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7