Compliance Impact

This vulnerability involves the logging of the SANnav database password in system audit logs, which could be accessed by a remote authenticated attacker. Exposure of sensitive credentials in logs can lead to unauthorized access to protected data.

Such exposure may impact compliance with common standards and regulations like GDPR and HIPAA, which require protection of sensitive information and proper access controls to prevent unauthorized disclosure.

Therefore, this vulnerability could lead to non-compliance with these regulations due to inadequate protection of sensitive credentials and potential unauthorized access.

Useful 0 Not Useful 0

Detection Guidance

I don't know

Useful 0 Not Useful 0

Mitigation Strategies

I don't know

Useful 0 Not Useful 0

Executive Summary

This vulnerability exists in the update-reports-purge-settings.sh script logging for Brocade SANnav versions before 2.4.0a. It could cause the SANnav database password to be recorded in the system audit logs. A remote authenticated attacker who can access these audit logs could then obtain the database password.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability could allow a remote authenticated attacker with access to the audit logs to retrieve the Brocade SANnav database password. This could lead to unauthorized access to the SANnav database, potentially compromising sensitive data or system integrity.

Useful 0 Not Useful 0