Brocade SANnav versions before v2.3.0a do not correctly set permissions on files, including docker files
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.7epss 0.5%
exploitation probability
0.5%top 57% of all CVEs
observed exploitation
nono source reports it
Brocade SANnav versions before v2.3.0a do not correctly set permissions on files, including docker files. An unprivileged attacker who gains access to the server can read sensitive information from these files.
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products
Brocade · Brocade SANnav