Back to Database
Status published
Medium
CVE-2025-6390
Cleartext storage of sensitive information in Brocade SANnav server audit logs.
Vulnerability Description
Brocade SANnav before SANnav 2.4.0a logs passwords and pbe keys in the Brocade SANnav server audit logs after installation and under specific conditions. These audit logs are the local server VM’s audit logs and are not controlled by SANnav. These logs are only visible to the server admin of the host server and are not visible to the SANnav admin or any SANnav user.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-6390
Credits & Attribution
No credits recorded in the NVD database.
More from Broadcom
View All →CVE-2025-9059
Elevation of Privileges Vulnerability in IT Management Suite
High
8.8
CVE-2025-8661
Stored Cross-Site Scripting in Symantec PGP Encryption 11.0.1
Medium
4.6
CVE-2025-8660
Privilege Escalation in Symantec PGP Encryption 11.0.1
Medium
5.6
CVE-2025-7398
Medium Strength Cipher Suites detected on port on ports 9000 and 8036
High
8.6
CVE-2025-7397
CLI history displays inline passwords
Medium
6.8
Affected Vendor
Broadcom
View all reports →Affected Software
Brocade SANnav
Vulnerable Versions:
before SANnav 2.4.0a
Timeline
Official Publish:
July 10th, 2025
Last Modified:
July 11th, 2025
Added to House:
July 22nd, 2026