Products
SANnav OVA
Source
sirt@brocade.com
Tags
CVE-2024-2859 details
Published : April 27, 2024, 12:15 a.m.
Last Modified : April 27, 2024, 12:15 a.m.
Last Modified : April 27, 2024, 12:15 a.m.
Description
By default, SANnav OVA is shipped with root user login enabled. While protected by a password, access to root could expose SANnav to a remote attacker should they gain access to the root account.
CVSS Score
| 1 | 2 | 3 | 4 | 5 | 6.8 | 7 | 8 | 9 | 10 |
|---|
Weakness
| Weakness | Name | Description |
|---|
CVSS Data
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Base Score
6.8
Exploitability Score
Impact Score
Base Severity
MEDIUM
Vector String : CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
References
| URL | Source |
|---|---|
| https://support.broadcom.com/external/content/SecurityAdvisories/0/23245 | sirt@brocade.com |
This website uses the NVD API, but is not approved or certified by it.