Plaintext Authentication Data Exposure in Brocade SANnav Logs

Executive Summary

This vulnerability involves sensitive authentication data being stored in plaintext within Brocade SANnav discovery service log files. Attackers with file read access can retrieve administrative switch credentials and active session tokens, potentially compromising managed network infrastructure.

Useful 0 Not Useful 0

Detection Guidance

Check Brocade SANnav log files and support bundles for plaintext authentication data. Search for credentials or session tokens in files like discovery service logs. Use commands like grep to scan logs for patterns such as passwords or tokens.

Useful 0 Not Useful 0

Impact Analysis

An attacker could gain unauthorized access to your network infrastructure, take control of switches, and access active application sessions. This could lead to data breaches, service disruptions, or further network compromise.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating confidentiality requirements in GDPR and HIPAA. Organizations may face compliance violations, legal penalties, and reputational damage due to exposed authentication credentials and session tokens.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade Brocade SANnav to version 3.0.1a or later. Restrict file read access to system logs and support bundles. Rotate all administrative switch credentials and active session tokens to prevent unauthorized access.

Useful 0 Not Useful 0