Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Plain password is generated in the audit logs while executing update-reports-purge-settings.sh script with Brocade SANnav before 2.4.0a
Vulnerability Description
A vulnerability in update-reports-purge-settings.sh script logging for Brocade SANnav before 2.4.0a could allow the collection of SANnav database password in the system audit logs. The vulnerability could allow a remote authenticated attacker with access to the audit logs to access the Brocade SANnav database password.
CVSS Information
N/A
Vulnerability Type
通过错误消息导致的信息暴露
Vulnerability Title
Brocade SANnav 安全漏洞
Vulnerability Description
Brocade SANnav是美国Brocade公司的一个存储区域网络管理软件。 Brocade SANnav 2.4.0a之前版本存在安全漏洞,该漏洞源于update-reports-purge-settings.sh脚本日志记录不当,可能导致SANnav数据库密码被收集。
CVSS Information
N/A
Vulnerability Type
N/A