CVE-2024-29963

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-29963
Brocade SANnav OVA before v2.3.1, and v2.3.0a, contain hardcoded TLS keys used by Docker. Note: Brocade SANnav doesn't have access to remote Docker registries.

3.8 /10

CVSS v3.0 : LOW

V3 Legend

Vector :

Exploitability : 2.0 / Impact : 1.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://support.broadcom.com/external/content/SecurityAdvisories/0/23247 Vendor Advisory
https://support.broadcom.com/external/content/SecurityAdvisories/0/23247 Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:broadcom:brocade_sannav:*:*:*:*:*:*:*:*
History

04 Feb 2025, 15:51

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 3.8
CPE cpe:2.3:a:broadcom:brocade_sannav:*:*:*:*:*:*:*:*
First Time Broadcom
Broadcom brocade Sannav
CWE CWE-798
References () https://support.broadcom.com/external/content/SecurityAdvisories/0/23247 - () https://support.broadcom.com/external/content/SecurityAdvisories/0/23247 - Vendor Advisory

26 Apr 2024, 23:15

Type Values Removed Values Added
Summary Brocade SANnav OVA before v2.3.1, and v2.3.0a, contain hardcoded keys used by Docker to reach remote registries over TLS. TLS connections with an exposed key allow an attacker to MITM the traffic. Note: Brocade SANnav doesn't have access to remote Docker registries. Brocade SANnav OVA before v2.3.1, and v2.3.0a, contain hardcoded TLS keys used by Docker. Note: Brocade SANnav doesn't have access to remote Docker registries.

19 Apr 2024, 04:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-04-19 04:15

Updated : 2025-02-04 15:51

NVD link : CVE-2024-29963

Mitre link : CVE-2024-29963

JSON object : View

Products Affected

broadcom

  • brocade_sannav
CWE
CWE-798

Use of Hard-coded Credentials