What’s Vulnerable › Vulnerabilities
CVE-2022-43933: configuration secrets are logged in support-save
- Severity: medium (CVSS 4.4 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-11-21 · updated 2026-06-17
- Weakness: CWE-538
Description
An information exposure through log file vulnerability exists in Brocade SANnav before Brocade SANnav 2.2.2, where configuration secrets are logged in supportsave. Supportsave file is generated by an admin user troubleshooting the switch. The Logged information may include usernames and passwords, and secret keys.
Affected products
- Brocade SANnav: before 2.2.2 — fixed in 2.2.2
How to fix
Upgrade to a fixed version: Brocade SANnav 2.2.2. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2022-43933 or the next vulnerability affects your stack