CVE-2022-43935: Switch passwords and authorization IDs are printed in the embedded MLS DB file
An information exposure through log file vulnerability exists in Brocade SANnav before Brocade SANnav 2.2.2, where Brocade Fabric OS Switch passwords and authorization IDs are printed in the embedded MLS DB file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-43935?
CVE-2022-43935 is considered a high severity vulnerability due to the risk of exposing sensitive authentication information.
How do I fix CVE-2022-43935?
To fix CVE-2022-43935, upgrade Brocade SANnav to version 2.2.2 or later to ensure sensitive information is not exposed.
What type of information is exposed in CVE-2022-43935?
CVE-2022-43935 exposes Brocade Fabric OS Switch passwords and authorization IDs in the embedded MLS DB file.
Which versions of Brocade SANnav are affected by CVE-2022-43935?
CVE-2022-43935 affects all versions of Brocade SANnav prior to version 2.2.2.
Why is CVE-2022-43935 considered an information exposure vulnerability?
CVE-2022-43935 is categorized as an information exposure vulnerability because it allows unauthorized access to sensitive log data.