Back to Database
Status published
High
CVE-2019-16208
Password-based encryption (PBE) algorithm, of Brocade SANnav versions before v2.0,...
Vulnerability Description
Password-based encryption (PBE) algorithm, of Brocade SANnav versions before v2.0, has a weakness in generating cryptographic keys that may allow an attacker to decrypt passwords used with several services (Radius, TACAS, etc.).
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-16208
Credits & Attribution
No credits recorded in the NVD database.
More from Brocade Communications Systems, Inc.
View All →CVE-2019-16210
Brocade SANnav versions before v2.0, logs plain text database connection...
Medium
5.5
CVE-2019-16209
A vulnerability, in The ReportsTrustManager class of Brocade SANnav versions...
High
7.4
CVE-2019-16207
Brocade SANnav versions before v2.0 use a hard-coded password, which...
High
7.8
CVE-2019-16206
The authentication mechanism, in Brocade SANnav versions before v2.0, logs...
Medium
5.5
CVE-2019-16205
A vulnerability, in Brocade SANnav versions before v2.0, could allow...
High
8.8
Affected Vendor
Brocade Communications Systems, Inc.
View all reports →Affected Software
Brocade SANnav
Vulnerable Versions:
versions before v2.0
Timeline
Official Publish:
November 8th, 2019
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.