Brocade SANnav OVA before v2.3.1, and v2.3.0a, contain hardcoded keys used by Docker to reach remote registries over TLS. TLS connections with an exposed key allow an attacker to MITM the traffic.
Note: Brocade SANnav doesn't have access to remote Docker registries.

Related CVEs

CVE-2024-29963

Key Information

GHSA ID

GHSA-rq82-xjv7-57jq

Published

April 19, 2024 6:30 AM

Last Modified

February 4, 2025 6:30 PM

CVSS Score

7.5 /10

Primary Ecosystem

Unknown

Primary Package

Unknown

GitHub Reviewed

✗ No

Dataset

Last updated: June 17, 2025 6:25 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.