3.8 - CVE-2024-29963

Executive Summary

This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.

Informations
Name	CVE-2024-29963	First vendor Publication	2024-04-19
Vendor	Cve	Last vendor Modification	2025-02-04

Security-Database Scoring CVSS v3

Cvss vector : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Overall CVSS Score	3.8
Base Score	3.8	Environmental Score	3.8
impact SubScore	1.4	Temporal Score	3.8
Exploitabality Sub Score	2

Attack Vector	Local	Attack Complexity	Low
Privileges Required	Low	User Interaction	None
Scope	Changed	Confidentiality Impact	Low
Integrity Impact	None	Availability Impact	None
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score	N/A	Attack Range	N/A
Cvss Impact Score	N/A	Attack Complexity	N/A
Cvss Expoit Score	N/A	Authentication	N/A
Calculate full CVSS 2.0 Vectors scores

Detail

Brocade SANnav OVA before v2.3.1, and v2.3.0a, contain hardcoded TLS keys used by Docker. Note: Brocade SANnav doesn't have access to remote Docker registries.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-29963

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-798	Use of Hard-coded Credentials (CWE/SANS Top 25)

CPE : Common Platform Enumeration

Type	Description	Count
Application	Broadcom Brocade Sannav cpe:2.3:a:broadcom:brocade_sannav:::::::: cpe:2.3:a:broadcom:brocade_sannav:-:::::::*	2

Sources (Detail)

https://support.broadcom.com/external/content/SecurityAdvisories/0/23247

Source	Url

Alert History

If you want to see full details history, please login or register.

Date	Informations
2025-02-04 21:21:03	Multiple Updates
2024-11-25 09:26:01	Multiple Updates
2024-04-27 05:27:29	Multiple Updates
2024-04-20 02:48:43	Multiple Updates
2024-04-20 02:48:41	Multiple Updates
2024-04-19 17:27:36	Multiple Updates
2024-04-19 09:27:24	First insertion