Read the docs
TI-2025-05793 Aliases CVE-2025-6392GHSA-f69j-qx6j-7fq8

Daily Data Dump Collector logs database password in cleartext when running docker exec commands (CVE-2025-6392)

Priority LOW 29CWE-532Published · Updated

Key facts

Attack vector
Local
Privileges required
High
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Information disclosure
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-532.

Summary

Brocade SANnav before Brocade SANnav 2.4.0a could log database passwords in clear text in audit logs when the daily data dump collector invokes docker exec commands. These audit logs are the local server VM’s audit logs and are not controlled by SANnav. These logs are only visible to the server admin of the host server and are not visible to the SANnav admin or any SANnav user.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00154 4th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
BroadcomBrocade SANnavBrocade SANnav versions before 2.4.0a—No fix listedCNA
  • Brocade SANnav VendorBroadcom Affected Brocade SANnav versions before 2.4.0a Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:broadcom:brocade_sannav:*:*:*:*:*:*:*:*before 2.4.0aVulnerableBroadcom
  • cpe:2.3:a:broadcom:brocade_sannav:*:*:*:*:*:*:*:* Versions before 2.4.0a Vulnerable ·Broadcom

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-6392
  2. 2026-10-03 Alias added: GHSA-f69j-qx6j-7fq8

References

Advisory 1

  • TI-2022-07428 SQL injection in JDBC Appender in Apache Log4j V1 CVSS 3.1CRITICAL 9.8
  • TI-2022-07425 Deserialization of untrusted data in JMSSink in Apache Log4j 1.x CVSS 3.1HIGH 8.8
  • TI-2024-03351 RADIUS Protocol under RFC2865 is vulnerable to forgery attacks. CVSS 3.1CRITICAL 9.0
  • TI-2024-19729 hard-coded credentials in the documentation that appear as the appliance root password CVSS 3.1CRITICAL 9.8
  • TI-2024-02079 Docker implementation in Brocade SANnav is missing Audit Rules. CVSS 4.0HIGH 8.6
  • TI-2023-15041 Web authentication and authorization bypass CVSS 3.1CRITICAL 9.8
See all 57 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences