CVE-2024-29964: Brocade SANnav versions before v2.3.0a do not correctly set permissions on files, including docker files
Published Apr 19, 2024
·Updated
Brocade SANnav versions before v2.3.0a do not correctly set permissions on files, including docker files. An unprivileged attacker who gains access to the server can read sensitive information from these files.
Affected Software
2 affected components
Brocade SANNav<2.3.0a
Broadcom Brocade Sannav<2.3.0a
Event History
Apr 19, 2024
CVE Published
via MITRE·04:39 AM
Data Sourced
via MITRE·04:39 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-29964?
CVE-2024-29964 has a high severity rating due to the potential for unprivileged attackers to access sensitive information.
2
How do I fix CVE-2024-29964?
To fix CVE-2024-29964, upgrade Brocade SANnav to version 2.3.0a or later to ensure proper file permissions.
3
What types of files are affected by CVE-2024-29964?
CVE-2024-29964 specifically affects docker files and other sensitive files with incorrect permissions.
4
Who can exploit CVE-2024-29964?
Unprivileged attackers who gain access to the server can exploit CVE-2024-29964.
5
What versions of Brocade SANnav are vulnerable to CVE-2024-29964?
Brocade SANnav versions prior to v2.3.0a are vulnerable to CVE-2024-29964.