Plaintext security passwords are logged in the audit logs while executing openssl cmd

Brocade SANnav before SANnav 2.4.0a logs plaintext passphrases in the Brocade SANnav host server audit logs while executing OpenSSL command using a passphrase from the command line or while providing the passphrase through a temporary file. These audit logs are the local server VM’s audit logs and are not controlled by SANnav. These logs are only visible to the server admin of the host server and are not visible to the SANnav admin or any SANnav user.

N/A

将系统数据暴露到未授权控制的范围

Broadcom Brocade SANnav 安全漏洞

Broadcom Brocade SANnav是美国博通（Broadcom）公司的一款存储区域网络管理和自动化软件平台。 Broadcom Brocade SANnav 2.4.0a之前版本存在安全漏洞，该漏洞源于日志中记录明文密码短语。

N/A

N/A