Brocade vulnerabilities
151 CVEs and advisories name Brocade as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-2240Docker implementation in Brocade SANnav is missing Audit Rules.
- CVE-2025-1053Brocade SANnav encryption key is logged in the debug logs
- CVE-2024-10404Clear text password seen in switch-asset-collectors-mw in Brocade SANnav supportsave
- CVE-2024-7517Privileged escalation via crafted use of portcfg command
- CVE-2024-10403SFTP/FTP password could be captured in plain text in Supportsave generated from SANnav
- CVE-2022-43937Brocade SANnav Information Disclosure Vulnerability
- CVE-2022-43936Brocade Fabric OS switch passwords when debugging is enabled
- CVE-2022-43935Switch passwords and authorization IDs are printed in the embedded MLS DB file
- CVE-2022-43934Weak Key-exchange algorithms
- CVE-2022-43933configuration secrets are logged in support-save
- CVE-2024-7516Brocade Fabric OS before 9.2.2 does not enforce strict host key checking
- CVE-2024-5460Brocade Fabric OS versions prior to v9.0 have default community strings
- CVE-2024-29954password management API prints sensitive information in log files
- CVE-2024-29953Encoded session passwords on session storage for Virtual Fabric platforms
- CVE-2024-2860The PostgreSQL implementation in Brocade SANnav versions before 2.3.0a is vulnerable to an incorrect local authentication flaw.
- CVE-2024-2859By default, SANnav OVA is shipped with root user login enabled (CVE-2024-2859)
- CVE-2024-4173SANnav versions exposes Kafka in the wan interface.
- CVE-2024-4161Syslog traffic sent in clear-text
- CVE-2024-4159Protection mechanisms
- CVE-2024-29969TLS/SSL weak message authentication code ciphers are added by default for port 18082
- CVE-2024-29968SQL Table names, column names, and SQL queries are collected in DR standby Supportsave
- CVE-2024-29967In Brocade SANnav before v2.31 and v2.3.0a, it was observed that Docker instances inside the appliance have insecure mount points
- CVE-2024-29966hard-coded credentials in the documentation that appear as the appliance root password
- CVE-2024-29965Insecure backup
- CVE-2024-29964Brocade SANnav versions before v2.3.0a do not correctly set permissions on files, including docker files
- CVE-2024-29962Insecure file permission setting that makes files world-readable
- CVE-2024-29963Brocade SANnav contains hardcoded TLS keys used by Docker
- CVE-2024-29961supply-chain attack risk
- CVE-2024-29960Identical SSH keys utilized inside the OVA image (CVE-2024-29960)
- CVE-2024-29959Brocade Fabric OS switch encrypted passwords in the Brocade SANnav Standby node's support save