CVE-2024-29963

low

Description

Brocade SANnav OVA before v2.3.1, and v2.3.0a, contain hardcoded TLS keys used by Docker. Note: Brocade SANnav doesn't have access to remote Docker registries.

References

https://pierrekim.github.io/blog/2024-04-24-brocade-sannav-18-vulnerabilities.html

https://support.broadcom.com/external/content/SecurityAdvisories/0/23247

Details

Source: Mitre, NVD

Published: 2024-04-19

Updated: 2025-02-04

Risk Information

CVSS v2

Base Score: 1.7

Vector: CVSS2#AV:L/AC:L/Au:S/C:P/I:N/A:N

Severity: Low

CVSS v3

Base Score: 3.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Severity: Low

EPSS

EPSS: 0.00041

Detections

Analytics