CVE-2019-16206

Description

The authentication mechanism, in Brocade SANnav versions before v2.0, logs plaintext account credentials at the ‘trace’ and the 'debug' logging level; which could allow a local authenticated attacker to access sensitive information.

Affected products

• Brocade Communications Systems, Inc. / Brocade SANnavversions before v2.0 – versions before v2.0

References

• VENDOR_ADVISORYhttps://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-865