CVE-2025-4662 - CVE House
Back to Database
Status published Medium CVE-2025-4662

Plaintext security passwords are logged in the audit logs while executing openssl cmd

Vulnerability Description

Brocade SANnav before SANnav 2.4.0a logs plaintext passphrases in the Brocade SANnav host server audit logs while executing OpenSSL command using a passphrase from the command line or while providing the passphrase through a temporary file. These audit logs are the local server VM’s audit logs and are not controlled by SANnav. These logs are only visible to the server admin of the host server and are not visible to the SANnav admin or any SANnav user.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-4662

Credits & Attribution

No credits recorded in the NVD database.

References

More from Broadcom

View All →
CVE-2025-9059
Elevation of Privileges Vulnerability in IT Management Suite
High 8.8
CVE-2025-8661
Stored Cross-Site Scripting in Symantec PGP Encryption 11.0.1
Medium 4.6
CVE-2025-8660
Privilege Escalation in Symantec PGP Encryption 11.0.1
Medium 5.6
CVE-2025-7398
Medium Strength Cipher Suites detected on port on ports 9000 and 8036
High 8.6
CVE-2025-7397
CLI history displays inline passwords
Medium 6.8

Affected Vendor

Affected Software

Brocade SANnav
Vulnerable Versions:
before SANnav 2.4.0a

Timeline

Official Publish: July 10th, 2025
Last Modified: July 11th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-497

MITRE ATT&CK TTPs

T1592 Gather Victim Host Information
Reconnaissance
T1082 System Information Discovery
Discovery
T1005 Data from Local System
Collection
T1552 Unsecured Credentials
Credential Access
T1041 Exfiltration Over C2 Channel
Exfiltration