CVE-2019-16206 - The authentication mechanism, in Brocade SANnav versions before v2.0, logs plaintext account credentials at the ‘trace’ and the 'debug' logging level; which could allow a local authenticated attacker to access sensitive information

Back Back to CVE browser

MEDIUM

The authentication mechanism, in Brocade SANnav versions before v2.0, logs plaintext account credentials at the ‘trace’ and the 'debug' logging level; which could allow a local authenticated attacker to access sensitive information

Published Nov 8, 2019

5.5

MEDIUM

CVSS 3.1

EPSS 0.20%

Description

The authentication mechanism, in Brocade SANnav versions before v2.0, logs plaintext account credentials at the ‘trace’ and the 'debug' logging level; which could allow a local authenticated attacker to access sensitive information.

Affected products

Vendor Brocade Communications Systems, Inc. Product Brocade SANnav Default
n/a
- Version
  versions before v2.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Brocade Communications Systems, Inc.

Brocade SANnav

n/a

Version	Status	Constraints
versions before v2.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-311

Missing Encryption of Sensitive Data

CWE-532

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-7018
Advisory
https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-865
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-7018		Advisory
https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-865		x_refsource_CONFIRMVendor Advisory