CVE-2024-29965: Insecure backup
In Brocade SANnav before v2.3.1, and v2.3.0a, it is possible to back up the appliance from the web interface or the command line interface ("SSH"). The resulting backups are world-readable. A local attacker can recover backup files, restore them to a new malicious appliance, and retrieve the passwords of all the switches.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-29965?
The severity of CVE-2024-29965 is classified as high due to the risk of sensitive data exposure.
How do I fix CVE-2024-29965?
To fix CVE-2024-29965, upgrade Brocade SANnav to version 2.3.1 or later.
Who is affected by CVE-2024-29965?
CVE-2024-29965 affects users of Brocade SANnav versions below 2.3.1 and 2.3.0a.
What type of attack does CVE-2024-29965 allow?
CVE-2024-29965 allows a local attacker to access world-readable backup files and restore them to a malicious appliance.
When was CVE-2024-29965 reported?
CVE-2024-29965 was reported in 2024, highlighting significant security concerns in the affected software versions.