← volver
CVE-2025-12774

SQL queries with sensitive information printed in logs with Brocade SANnav before 3.0

CVSS 4.6 MEDIUMEPSS 0.2%CWE-312
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 4.6EPSS 0.2%KEV nãoPoC Nuclei Metasploit Patch
Ciclo de vida
03 feb 2026Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A vulnerability in the migration script for Brocade SANnav before 3.0 could allow the collection of database sql queries in the SANnav support save file. An attacker with access to Brocade SANnav supportsave file, could open the file and then obtain sensitive information such as details of database tables and encrypted passwords.
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Productos afectados
Brocade · SANnav

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →