CVE-2024-29960: Identical SSH keys utilized inside the OVA image (CVE-2024-29960)
First published: Fri Apr 19 2024(Updated: )
In Brocade SANnav server before v2.3.1 and v2.3.0a, the SSH keys inside the OVA image are identical in the VM every time SANnav is installed. Any Brocade SAnnav VM based on the official OVA images is vulnerable to MITM over SSH. An attacker can decrypt and compromise the SSH traffic to the SANnav.
Credit: sirt@brocade.com
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
- agent/references
- agent/type
- agent/first-publish-date
- agent/weakness
- agent/author
- agent/event
- agent/tags
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/title
- agent/description