Back to Database
Status published
Medium
CVE-2025-6392
Daily Data Dump Collector logs database password in cleartext when running docker exec commands (CVE-2025-6392)
Vulnerability Description
Brocade SANnav before Brocade SANnav 2.4.0a could log database passwords in clear text in audit logs when the daily data dump collector invokes docker exec commands. These audit logs are the local server VM’s audit logs and are not controlled by SANnav. These logs are only visible to the server admin of the host server and are not visible to the SANnav admin or any SANnav user.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-6392
Credits & Attribution
No credits recorded in the NVD database.
More from Broadcom
View All →CVE-2025-9059
Elevation of Privileges Vulnerability in IT Management Suite
High
8.8
CVE-2025-8661
Stored Cross-Site Scripting in Symantec PGP Encryption 11.0.1
Medium
4.6
CVE-2025-8660
Privilege Escalation in Symantec PGP Encryption 11.0.1
Medium
5.6
CVE-2025-7398
Medium Strength Cipher Suites detected on port on ports 9000 and 8036
High
8.6
CVE-2025-7397
CLI history displays inline passwords
Medium
6.8
Affected Vendor
Broadcom
View all reports →Affected Software
Brocade SANnav
Vulnerable Versions:
Brocade SANnav versions before 2.4.0a
Timeline
Official Publish:
July 10th, 2025
Last Modified:
July 11th, 2025
Added to House:
July 22nd, 2026