CVE-2022-43937

MEDIUM EPSS 36.4%

Published Nov 21, 20241y ago · Modified Jun 17, 20262w ago

5.5 CVSS 3.1

Medium

Published Nov 21, 2024 1y ago

Last Modified Jun 17, 2026 2w ago

Description

Possible information exposure through log file vulnerability where sensitive fields are recorded in the debug-enabled logs when debugging is turned on in Brocade SANnav before 2.3.0 and 2.2.2a

CVSS Details

Base Score

5.5

Exploitability

1.8

Impact

3.6

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack Vector Local

Attack Complexity Low

Privileges Required Low

User Interaction None

Scope Unchanged

Confidentiality High

Integrity None

Availability None

Threat Intelligence

EPSS Exploit Probability

36.4% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-532

Affected Products 1

Vendor	Product	Version	Range
broadcom	brocade_sannav	*	<2.2.2a

References 2

security.netapp.com https://security.netapp.com/advisory/ntap-20240229-0005/

Third Party Advisory
support.broadcom.com https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/22509

Vendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.