BSA-2021-1484
21558
10 May 2021
10 May 2021
Closed
Medium
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H - 6.6
N/A
CVE-2020-15382
Summary Security Advisory ID : BSA-2021-1484 Component : hard-coded administrator account Revision : 1.0
Brocade SANnav before version 2.1.1 uses a hard-coded administrator account with the weak password ‘passw0rd’ if a password is not provided for PostgreSQL at install-time.
Affected Products
Brocade SANnav versions before SANnav 2.1.1
Products Confirmed Not Vulnerable
No other Brocade Fibre Channel Products from Broadcom products are currently known to be affected by this vulnerability.
Solution
A security update has been provided in Brocade SANnav 2.1.1 and higher releases.
Workaround
Credit
This issue was discovered through security testing.
Revision History
| Version | Change | Date |
|---|---|---|
| 1.0 | Initial Publication | May 10, 2021 |