High severity7.7NVD Advisory· Published Apr 19, 2024· Updated Jun 17, 2026

CVE-2024-29968

Description

An information disclosure vulnerability exists in Brocade SANnav before v2.3.1 and v2.3.0a when Brocade SANnav instances are configured in disaster recovery mode. SQL Table names, column names, and SQL queries are collected in DR standby Supportsave. This could allow authenticated users to access the database structure and its contents.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Broadcom Corporation/Brocade Sannav
cpe:2.3:a:broadcom:brocade_sannav:*:*:*:*:*:*:*:*
Range: <2.3.0a
Brocade/SANnavllm-fuzzy
Range: <2.3.1, <2.3.0a
Brocade/Brocade SANnavv5
Range: before v2.3.1 and v2.3.0a

Patches

Vulnerability mechanics

References

support.broadcom.com/external/content/SecurityAdvisories/0/23253nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.501
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000