CVE-2026-14443: Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav before 3.0.1a
Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav versions before 3.0.1a permit extension switch pre-shared keys to be written to system logs. Individuals with read access to container logs or support archives can obtain these keys, leading to the potential compromise of encrypted network tunnels.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Brocade SANnavto a version that resolves this vulnerability.Fixed in 3.0.1a
Event History
Frequently Asked Questions
Who can obtain the exposed pre-shared keys?
Individuals who have read access to container logs or to support archives can obtain extension switch pre-shared keys written to those locations.
What access does an attacker need to exploit this issue?
The attacker needs read access to the affected system's container logs or support archives. The issue does not describe a remote unauthenticated path to retrieve the keys.
Which deployments are affected?
Brocade SANnav versions before 3.0.1a are affected when bulk IPsec policy collection occurs. The available information does not state whether this collection is enabled or performed by default.
What is the impact if keys were exposed?
Obtaining the extension switch pre-shared keys can potentially compromise encrypted network tunnels.