Brocade SANnav Encryption Key Exposure Vulnerability

A vulnerability exists in Brocade SANnav versions prior to 2.3.1b, where under certain error conditions during installation or upgrade, the encryption key can be inadvertently logged and later retrieved from a Brocade SANnav supportsave file. This exposure allows an attacker with privileged access to the Brocade SANnav database to use the encryption key to decrypt passwords used by Brocade SANnav.

Impact

Exploitation of this vulnerability could lead to unauthorized access to decrypted passwords used within Brocade SANnav, potentially allowing for further exploitation or access within the application.

Remediation

Users can upgrade to Brocade SANnav versions 2.4.0 or 2.3.1b to address this vulnerability.