CVE-2024-2240 - Docker implementation in Brocade SANnav is missing Audit Rules.

Back Back to CVE browser

HIGH

Docker implementation in Brocade SANnav is missing Audit Rules.

Published Feb 14, 2025

8.6

HIGH

CVSS 4.0

EPSS 0.51%

Description

Docker daemon in Brocade SANnav before SANnav 2.3.1b runs without auditing. The vulnerability could allow a remote authenticated attacker to execute various attacks.

Affected products

Vendor Brocade Product Brocade SANnav Default
affected
- Version
  Brocade SANnav before 2.3.1b
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Brocade

Brocade SANnav

affected

Version	Status	Constraints
Brocade SANnav before 2.3.1b	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-250

Execution with Unnecessary Privileges

References (1)

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25401
Vendor Advisory

Link	Providers	Tags
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25401		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner brocade

Published Feb 14, 2025

Updated Feb 14, 2025

Reserved Mar 6, 2024

Link CVE-2024-2240

CISA Vulnrichment

Updated Feb 14, 2025

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2024-2240

Red Hat

Severity n/a

Public date n/a

Links CVE-2024-2240