Vulnerabilities > CVE-2022-28168 - Insecure Storage of Sensitive Information vulnerability in Broadcom Sannav 2.1.0/2.1.1/2.2.0.0

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
broadcom
CWE-922
NVD
Published: 2022-06-27
Updated: 2024-11-21

Summary

In Brocade SANnav before Brocade SANnav v2.2.0.2 and Brocade SANnav2.1.1.8, encoded scp-server passwords are stored using Base64 encoding, which could allow an attacker able to access log files to easily decode the passwords.

Vulnerable Configurations

Part Description Count
Application
Broadcom
4

Common Weakness Enumeration (CWE)

References