VulnerabilityAnalyzed
CVE-2024-29964
An unprivileged attacker who gains access to the server can read sensitive information from these files.
MEDIUM 6.5EPSS 0.52%
Does this matter?
Lower severity and a low EPSS score (0.52%). Track it; it rarely justifies an emergency change on its own.
Description
Brocade SANnav versions before v2.3.0a do not correctly set permissions on files, including docker files. An unprivileged attacker who gains access to the server can read sensitive information from these files.
- CVSS 3.1
- 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 0.52% probability · 43th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-732
- Affected
- broadcom/brocade sannav
- Source
- sirt@brocade.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.