CVE-2024-29963

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-29963
Brocade SANnav OVA before v2.3.1, and v2.3.0a, contain hardcoded TLS keys used by Docker. Note: Brocade SANnav doesn't have access to remote Docker registries.

1.9 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 0.5 / Impact : 1.4

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://support.broadcom.com/external/content/SecurityAdvisories/0/23247 Vendor Advisory
https://support.broadcom.com/external/content/SecurityAdvisories/0/23247 Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:broadcom:brocade_sannav:*:*:*:*:*:*:*:*
History

04 Feb 2025, 15:51

Type Values Removed Values Added
CPE cpe:2.3:a:broadcom:brocade_sannav:*:*:*:*:*:*:*:*
References () https://support.broadcom.com/external/content/SecurityAdvisories/0/23247 - () https://support.broadcom.com/external/content/SecurityAdvisories/0/23247 - Vendor Advisory
First Time Broadcom brocade Sannav
Broadcom

21 Nov 2024, 09:08

Type Values Removed Values Added
References () https://support.broadcom.com/external/content/SecurityAdvisories/0/23247 - () https://support.broadcom.com/external/content/SecurityAdvisories/0/23247 -

26 Apr 2024, 23:15

Type Values Removed Values Added
Summary (en) Brocade SANnav OVA before v2.3.1, and v2.3.0a, contain hardcoded keys used by Docker to reach remote registries over TLS. TLS connections with an exposed key allow an attacker to MITM the traffic. Note: Brocade SANnav doesn't have access to remote Docker registries. (en) Brocade SANnav OVA before v2.3.1, and v2.3.0a, contain hardcoded TLS keys used by Docker. Note: Brocade SANnav doesn't have access to remote Docker registries.
CVSS v2 : unknown
v3 : 8.6 		v2 : unknown
v3 : 1.9

19 Apr 2024, 13:10

Type Values Removed Values Added
Summary
  • (es) Brocade SANnav OVA anterior a v2.3.1 y v2.3.0a contiene claves codificadas utilizadas por Docker para acceder a registros remotos a través de TLS. Las conexiones TLS con una clave expuesta permiten a un atacante MITM el tráfico. Nota: Brocade SANnav no tiene acceso a registros Docker remotos.

19 Apr 2024, 04:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-04-19 04:15

Updated : 2025-02-04 15:51

NVD link : CVE-2024-29963

Mitre link : CVE-2024-29963

CVE.ORG link : CVE-2024-29963

JSON object : View

Products Affected

broadcom

  • brocade_sannav
CWE
CWE-798

Use of Hard-coded Credentials