CVE-2025-4662: Plaintext security passwords are logged in the audit logs while executing openssl cmd
Brocade SANnav before SANnav 2.4.0a logs plaintext passphrases in the Brocade SANnav host server audit logs while executing OpenSSL command using a passphrase from the command line or while providing the passphrase through a temporary file.
These audit logs are the local server VM’s audit logs and are not controlled by SANnav. These logs are only visible to the server admin of the host server and are not visible to the SANnav admin or any SANnav user.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4662?
CVE-2025-4662 is considered a high-severity vulnerability due to the logging of plaintext passphrases.
How do I fix CVE-2025-4662?
To fix CVE-2025-4662, upgrade to Brocade SANnav version 2.4.0a or later.
What are the potential risks of CVE-2025-4662?
The risks include unauthorized access to sensitive information since plaintext passphrases are logged.
Which versions of Brocade SANnav are affected by CVE-2025-4662?
Brocade SANnav versions prior to 2.4.0a are affected by CVE-2025-4662.
How does CVE-2025-4662 impact data security?
CVE-2025-4662 impacts data security by exposing sensitive passphrase information in audit logs.