{"id":"CVE-2022-43933","url":"https://www.cyber-defence.io/tools/cve/CVE-2022-43933","generatedAt":"2026-10-27T19:39:48.661Z","title":"An information exposure through log file vulnerability exists in Brocade SANnav before Brocade SANnav 2.2.2, where configuration secrets are logged in supportsave.","description":"An information exposure through log file vulnerability exists in Brocade SANnav before Brocade SANnav 2.2.2, where configuration secrets are logged in supportsave. Supportsave file is generated by an admin user troubleshooting the switch. The Logged information may include usernames and passwords, and secret keys.","published":"2024-11-21T11:15:11.000Z","lastModified":"2026-06-17T05:07:30.000Z","status":"Analyzed","sourceIdentifier":"sirt@brocade.com","cvss":{"version":"3.1","score":4.4,"severity":"MEDIUM","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"},"cwe":["CWE-538","CWE-532"],"affected":["broadcom/brocade sannav"],"epss":{"score":0.0026,"percentile":0.17567,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.26%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/21221","tags":["Vendor Advisory"],"source":"sirt@brocade.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2022-43933","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}