CVE-2023-31424

Web authentication and authorization bypass

State: Published
Severity: 8.1 High
Published: Aug 31, 2023
Updated: Feb 13, 2025
Reserved: Apr 28, 2023

Description

Brocade SANnav Web interface before Brocade SANnav v2.3.0 and v2.2.2a allows remote unauthenticated users to bypass web authentication and authorization.

Scores

CVSS	Score	Vector	Source
3.1	8.1 High	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	brocade

Weaknesses

CWE-290 Authentication Bypass by Spoofing

Affected Products

Product	Versions
SANnavBrocade	Brocade SANnav before Brocade SANnav v2.3.0 and v2.2.2aAffected

References

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/22507
https://security.netapp.com/advisory/ntap-20240229-0004/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.