What is the severity of CVE-2024-29968?

CVE-2024-29968 has a medium severity rating due to its potential to disclose sensitive information.

What are the affected versions of Brocade SANnav for CVE-2024-29968?

Brocade SANnav versions 2.3.1 and 2.3.0a and earlier are affected by CVE-2024-29968.

How do I fix CVE-2024-29968?

To fix CVE-2024-29968, update Brocade SANnav to version 2.3.1 or later.

What type of vulnerability is CVE-2024-29968?

CVE-2024-29968 is categorized as an information disclosure vulnerability.

How does CVE-2024-29968 affect Brocade SANnav in disaster recovery mode?

In disaster recovery mode, CVE-2024-29968 allows the collection of SQL table names, column names, and queries, which could lead to sensitive data exposure.

Vulnerability/
CVE-2024-29968

high

7.7

CWE

922

19/4/2024

4/2/2025

CVE-2024-29968: SQL Table names, column names, and SQL queries are collected in DR standby Supportsave

First published: Fri Apr 19 2024(Updated: )

An information disclosure vulnerability exists in Brocade SANnav before v2.3.1 and v2.3.0a when Brocade SANnav instances are configured in disaster recovery mode. SQL Table names, column names, and SQL queries are collected in DR standby Supportsave. This could allow authenticated users to access the database structure and its contents.

Credit: sirt@brocade.com

Affected Software	Affected Version	How to fix
Broadcom SANnav OVA	<2.3.0a
Broadcom SANnav OVA	<2.3.1
Broadcom SANnav OVA

Never miss a vulnerability like this again

Reference Links

https://support.broadcom.com/external/content/SecurityAdvisories/0/23253

Frequently Asked Questions

What is the severity of CVE-2024-29968?
CVE-2024-29968 has a medium severity rating due to its potential to disclose sensitive information.
What are the affected versions of Brocade SANnav for CVE-2024-29968?
Brocade SANnav versions 2.3.1 and 2.3.0a and earlier are affected by CVE-2024-29968.
How do I fix CVE-2024-29968?
To fix CVE-2024-29968, update Brocade SANnav to version 2.3.1 or later.
What type of vulnerability is CVE-2024-29968?
CVE-2024-29968 is categorized as an information disclosure vulnerability.
How does CVE-2024-29968 affect Brocade SANnav in disaster recovery mode?
In disaster recovery mode, CVE-2024-29968 allows the collection of SQL table names, column names, and queries, which could lead to sensitive data exposure.

agent/title
agent/references
agent/type
agent/first-publish-date
agent/author
agent/event
collector/mitre-cve
source/MITRE
agent/weakness
agent/description
agent/source
agent/last-modified-date
agent/severity
agent/softwarecombine
agent/tags
collector/nvd-api
source/NVD
agent/software-canonical-lookup
agent/software-canonical-lookup-request
agent/guess-ai
vendor/broadcom
canonical/broadcom sannav ova
vendor/brocade

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.