Read the docs
TI-2025-04161 Aliases CVE-2025-4662GHSA-5jx5-2f25-63x5

Plaintext security passwords are logged in the audit logs while executing openssl cmd

Priority LOW 22CWE-497Published · Updated

Key facts

Attack vector
Local
Privileges required
High
User interaction
Passive
Attack complexity
Low
Attack requirements
None
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-497.

Summary

Brocade SANnav before SANnav 2.4.0a logs plaintext passphrases in the Brocade SANnav host server audit logs while executing OpenSSL command using a passphrase from the command line or while providing the passphrase through a temporary file. These audit logs are the local server VM’s audit logs and are not controlled by SANnav. These logs are only visible to the server admin of the host server and are not visible to the SANnav admin or any SANnav user.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00154 4th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
BroadcomBrocade SANnavbefore SANnav 2.4.0a—No fix listedCNA
  • Brocade SANnav VendorBroadcom Affected before SANnav 2.4.0a Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:broadcom:brocade_sannav:*:*:*:*:*:*:*:*before 2.4.0aVulnerableBroadcom
  • cpe:2.3:a:broadcom:brocade_sannav:*:*:*:*:*:*:*:* Versions before 2.4.0a Vulnerable ·Broadcom

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-4662
  2. 2026-10-03 Alias added: GHSA-5jx5-2f25-63x5

References

Advisory 1

  • TI-2022-07428 SQL injection in JDBC Appender in Apache Log4j V1 CVSS 3.1CRITICAL 9.8
  • TI-2022-07425 Deserialization of untrusted data in JMSSink in Apache Log4j 1.x CVSS 3.1HIGH 8.8
  • TI-2024-03351 RADIUS Protocol under RFC2865 is vulnerable to forgery attacks. CVSS 3.1CRITICAL 9.0
  • TI-2024-19729 hard-coded credentials in the documentation that appear as the appliance root password CVSS 3.1CRITICAL 9.8
  • TI-2024-02079 Docker implementation in Brocade SANnav is missing Audit Rules. CVSS 4.0HIGH 8.6
  • TI-2023-15041 Web authentication and authorization bypass CVSS 3.1CRITICAL 9.8
See all 57 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences