CVE-2024-29963 – Brocade SANnav OVA before v2.3.1, and v2.3.0a, contain hardcoded keys used by Docker to …

Vuln ID: CVE-2024-29963

Published:  2024-04-19  04:15:10.793

Description: Brocade SANnav OVA before v2.3.1, and v2.3.0a, contain hardcoded keys used by Docker to reach remote registries over TLS. TLS connections with an exposed key allow an attacker to MITM the traffic.
Note: Brocade SANnav doesn’t have access to remote Docker registries.

Base Score: 8.6 – HIGH

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Source: NVD.NIST.GOV

 

Date:

Categorie(s):

Tag(s):