Insecure access controls on internal service ports in Brocade SANnav versions before 3.0.1a allow local, non-administrative host users to communicate directly with backend…

Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service

Insufficient input sanitization of shell metacharacters in Brocade SANnav before 3.0.1a

Brocade Fabric OS switch encrypted passwords in the Brocade SANnav Standby node's support save

Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav before 3.0.1.a

Plaintext exposure of sensitive authentication data in SANnav discovery service log files

Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav before 3.0.1a

supply-chain attack risk

The PostgreSQL implementation in Brocade SANnav versions before 2.3.0a is vulnerable to an incorrect local authentication flaw

SQL queries with sensitive information printed in logs with Brocade SANnav before 3.0

Weak Key-exchange algorithms

TLS/SSL weak message authentication code ciphers are added by default for port 18082

Identical SSH keys utilized inside the OVA image (CVE-2024-29960)

Encryption key is stored in the DR log files