CVE-2024-29964— Brocade SANnav versions before v2.3.0a do not correctly set permissions on files, including docker files
Quick assessment
Affected
Brocade Brocade SANnav
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Broadcom Brocade SANnav是美国博通（Broadcom）公司的一套SAN管理平台。 Brocade SANnav v2.3.1 版本和 v2.3.0a 版本存在安全漏洞，该漏洞源于 Docker 实例具有不安全的架构和配置，导致多个漏洞。Docker 守护进程暴露于 WAN 接口。Docker 实例可以访问任何其他实例，并且少数实例可以访问敏感文件。该漏洞可能允许底层操作系统上的 sudo 特权用户访问和修改这些文件。
Possible ATT&CK Techniques 1 AI
T1530 · Data from Cloud Storage
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2024-29964
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Brocade SANnav versions before v2.3.0a do not correctly set permissions on files, including docker files
Source: CVE Program / CVE List V5
Vulnerability Description
Brocade SANnav versions before v2.3.0a do not correctly set permissions on files, including docker files. An unprivileged attacker who gains access to the server can read sensitive information from these files.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
关键资源的不正确权限授予
Source: CVE Program / CVE List V5
Vulnerability Title
Broadcom Brocade SANnav 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Broadcom Brocade SANnav是美国博通（Broadcom）公司的一套SAN管理平台。 Brocade SANnav v2.3.1 版本和 v2.3.0a 版本存在安全漏洞，该漏洞源于 Docker 实例具有不安全的架构和配置，导致多个漏洞。Docker 守护进程暴露于 WAN 接口。Docker 实例可以访问任何其他实例，并且少数实例可以访问敏感文件。该漏洞可能允许底层操作系统上的 sudo 特权用户访问和修改这些文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Brocade | Brocade SANnav | before v2.3.0a | - |
|
II. Public POCs for CVE-2024-29964
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-29964
请登录查看更多情报信息。
Same Patch Batch · Brocade · 2024-04-19 · 13 CVEs total
| CVE-2024-29959 | 8.6 HIGH | Brocade Fabric OS switch encrypted passwords in the Brocade SANnav Standby node's support |
| CVE-2024-29961 | 8.2 HIGH | supply-chain attack risk |
| CVE-2024-29968 | 7.7 HIGH | SQL Table names, column names, and SQL queries are collected in DR standby Supportsave |
| CVE-2024-29957 | 7.5 HIGH | Encryption key is stored in the DR log files |
| CVE-2024-29958 | 7.5 HIGH | Encryption key in the console when a privileged user executes the script to replace the Br |
| CVE-2024-29966 | 7.5 HIGH | hard-coded credentials in the documentation that appear as the appliance root password |
| CVE-2024-29969 | 7.5 HIGH | TLS/SSL weak message authentication code ciphers are added by default for port 18082 |
| CVE-2024-29960 | 6.8 MEDIUM | Identical SSH keys utilized inside the OVA image (CVE-2024-29960) |
| CVE-2024-29965 | 6.8 MEDIUM | Insecure backup |
| CVE-2024-29962 | 5.5 MEDIUM | Insecure file permission setting that makes files world-readable |
| CVE-2024-29967 | 4.4 MEDIUM | In Brocade SANnav before v2.31 and v2.3.0a, it was observed that Docker instances inside t |
| CVE-2024-29963 | 1.9 LOW | Brocade SANnav contains hardcoded TLS keys used by Docker |
IV. Related Vulnerabilities
Same product: Brocade SANnav
-
CVE-2025-6392
Daily Data Dump Collector logs database password in cleartex -
CVE-2025-6390
Cleartext storage of sensitive information in Brocade SANnav -
CVE-2025-4662
Plaintext security passwords are logged in the audit logs wh -
CVE-2024-4282
Weak TLS Ciphers on Brocade SANnav OVA SSH port 22 -
CVE-2024-10405
Weak TLS Ciphers on Brocade SANnav port 443 & 18082
Same vendor: Brocade
-
CVE-2026-85417
Incomplete property masking in the SANnav logging subsystem -
CVE-2026-14441
Logic flaw in SANnav Java cache key handling object comparis -
CVE-2026-14442
Information exposure vulnerability in the job scheduling com -
CVE-2026-14443
Incomplete log sanitization during bulk IPsec policy collect -
CVE-2026-82372
Improper handling of sensitive data during IPsec policy crea
Same weakness: CWE-732
-
CVE-2026-94204
Incorrect Permission Assignment for Critical Resource in Vii -
CVE-2026-84414
IBM i is Affected By An Incorrect Permission Assignment Vuln -
CVE-2026-73598
Dell SCG Policy Manager <5.34.00.16 提权漏洞 -
CVE-2026-15952
Improper Permission Assignment in Scheduler Service -
CVE-2026-82164
Dell Trusted Device Client < 8.1.359.0 权限配置错误漏洞
V. Comments for CVE-2024-29964
No comments yet