CVE-2026-85417
Incomplete property masking in the SANnav logging subsystem
- State
- Published
- Severity
- 6.4 Medium
- Published
- Sep 25, 2026
- Updated
- Sep 29, 2026
- Reserved
- Sep 3, 2026
Description
Incomplete property masking in the SANnav logging subsystem permits SNMP authentication and privacy passwords to be recorded in application logs under specific configuration conditions. Individuals with read access to system logs or support bundles can retrieve these credentials, leading to unauthorized read or management access to monitored switch environments
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.4 Medium | CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:H | brocade |
Weaknesses
- CWE-532 Insertion of Sensitive Information into Log File
Affected Products
| Product | Versions |
|---|---|
SANnavBrocade |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.