CVE-2024-29964: Brocade SANnav versions before v2.3.0a do not correctly set permissions on files, including docker files
Brocade SANnav versions before v2.3.0a do not correctly set permissions on files, including docker files. An unprivileged attacker who gains access to the server can read sensitive information from these files.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Brocade SANnavto a version that resolves this vulnerability.Fixed in 2.3.0a
Event History
Frequently Asked Questions
What is the severity of CVE-2024-29964?
CVE-2024-29964 has a high severity rating due to the potential for unprivileged attackers to access sensitive information.
How do I fix CVE-2024-29964?
To fix CVE-2024-29964, upgrade Brocade SANnav to version 2.3.0a or later to ensure proper file permissions.
What types of files are affected by CVE-2024-29964?
CVE-2024-29964 specifically affects docker files and other sensitive files with incorrect permissions.
Who can exploit CVE-2024-29964?
Unprivileged attackers who gain access to the server can exploit CVE-2024-29964.
What versions of Brocade SANnav are vulnerable to CVE-2024-29964?
Brocade SANnav versions prior to v2.3.0a are vulnerable to CVE-2024-29964.