Brocade SANnav Weak TLS Cipher Vulnerability on Ports 443 and 18082

A vulnerability exists in Brocade SANnav versions prior to 2.3.1b, where weak TLS ciphers are enabled on ports 443 and 18082. This vulnerability allows an attacker to intercept and read the SANnav data stream, which includes performance data, port status, zoning information, WWNs, and IP addresses from monitored Brocade Fabric OS switches. However, no customer data, personal data, or sensitive information such as secrets or passwords is exposed, as this information does not traverse the network.

Impact

Exploitation of this vulnerability allows for the interception and reading of unencrypted SANnav data, including performance metrics and configuration details from Brocade Fabric OS switches.

Remediation

Users can upgrade to Brocade SANnav versions 2.4.0 or 2.3.1b to address this vulnerability.