CVEvulnerability

CVE-2019-16206

5.5 MEDIUM Published 2019-11-08 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2019-11-08
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected]): 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Weaknesses: CWE-311, CWE-532

Description

The authentication mechanism, in Brocade SANnav versions before v2.0, logs plaintext account credentials at the ‘trace’ and the 'debug' logging level; which could allow a local authenticated attacker to access sensitive information.

Affected configurations

• broadcom brocade sannav (< 2.0)

Weakness · CWE (2)

CWE-311 Missing Encryption of Sensitive Data weakness
CWE-532 Insertion of Sensitive Information into Log File weakness

References

https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-865 Vendor Advisory
https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-865 Vendor Advisory

CVE-2019-16206

Description

Affected configurations

Related

Weakness · CWE (2)

References