Back to Database
Status published
Medium
CVE-2019-16206
The authentication mechanism, in Brocade SANnav versions before v2.0, logs...
Vulnerability Description
The authentication mechanism, in Brocade SANnav versions before v2.0, logs plaintext account credentials at the ‘trace’ and the 'debug' logging level; which could allow a local authenticated attacker to access sensitive information.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-16206
Credits & Attribution
No credits recorded in the NVD database.
More from Brocade Communications Systems, Inc.
View All →CVE-2019-16210
Brocade SANnav versions before v2.0, logs plain text database connection...
Medium
5.5
CVE-2019-16209
A vulnerability, in The ReportsTrustManager class of Brocade SANnav versions...
High
7.4
CVE-2019-16208
Password-based encryption (PBE) algorithm, of Brocade SANnav versions before v2.0,...
High
7.5
CVE-2019-16207
Brocade SANnav versions before v2.0 use a hard-coded password, which...
High
7.8
CVE-2019-16205
A vulnerability, in Brocade SANnav versions before v2.0, could allow...
High
8.8
Affected Vendor
Brocade Communications Systems, Inc.
View all reports →Affected Software
Brocade SANnav
Vulnerable Versions:
versions before v2.0
Timeline
Official Publish:
November 8th, 2019
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.