Threat Investigation
Request a demo

CVE-2022-28167

Medium

Description

Brocade SANnav before Brocade SANvav v. 2.2.0.2 and Brocade SANanv v.2.1.1.8 logs the Brocade Fabric OS switch password in plain text in asyncjobscheduler-manager.log

SeverityMedium
CVSS6.5
Exploit probability—
ProductBroadcom Sannav
PublishedJun 27, 2022
First seenJun 27, 2022

How to fix

Update
  • broadcom sannav2.1.1.8, 2.2.0.2 or later

Affected products

ProductAffected versionsFixed in
broadcom sannavv < 2.1.1.8, 2.2.0.0 ≤ v < 2.2.0.22.1.1.8, 2.2.0.2

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.