CVE-2024-2859

Published: Apr 27, 2024

Modified: Mar 19, 2025

PUBLISHED

CVSS v3.1

6.8

MEDIUM

Description

By default, SANnav OVA is shipped with root user login enabled. While protected by a password, access to root could expose SANnav to a remote attacker should they gain access to the root account.

Vendor	Product	Versions
Brocade	Brocade SANnav	affected `v2.3.0`

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

References

https://support.broadcom.com/external/content/SecurityAdvisories/0/23245

https://security.netapp.com/advisory/ntap-20240628-0003/

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2024-2859

Description

Affected Products

CVSS v3.1 Details

References