THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Zendesk (Helpdesk and Chat)

Ok

PUBLISHED

CVE-2024-29950

Brocade SANnav before v2.3.1, v2.3.0a uses weak encryption

Assigner:brocade (87b297d7-335e-4844-9551-11b97995a791)
Reserved:2024-03-22
Published:2024-04-17
Updated:2024-06-07

Description

The class FileTransfer implemented in Brocade SANnav before v2.3.1, v2.3.0a, uses the ssh-rsa signature scheme, which has a SHA-1 hash. The vulnerability could allow a remote, unauthenticated attacker to perform a man-in-the-middle attack.



HIGH: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Problem types

CWE-326 Inadequate Encryption Strength

Product status

Default status
affected

versions before Brocade SANnav v2.3.1, v2.3.0a
affected

References

https://support.broadcom.com/external/content/SecurityAdvisories/0/23236

cve.org CVE-2024-29950

nvd.nist.gov CVE-2024-29950

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-29950