CVE-2025-1053 HIGH

CVE-2025-1053: Brocade SANnav encryption key is logged in the debug logs

Vendor Brocade

Product Brocade SANnav

Weakness CWE-532 · Sensitive info in logs

Published February 14, 2025

Last update September 9, 2025

View on NVD All CVEs

CVSS base score

8.6/10

Attack vector Local

Attack complexity High

Privileges required None

User interaction —

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N

What the vulnerability does

01Description

Under certain error conditions at time of SANnav installation or upgrade, the encryption key can be written into and obtained from a Brocade SANnav supportsave. An attacker with privileged access to the Brocade SANnav database could use the encryption key to obtain passwords used by Brocade SANnav.

Key dates

02Disclosure timeline

February 14, 2025 CVE published

September 9, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-1053 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/532.html

Related vulnerabilities

04Related CVE

CVE-2025-59203 Windows State Repository API Server File Information Disclosure Vulnerability CVE-2024-32811 WordPress USPS Shipping for WooCommerce – Live Rates plugin <= 1.9.4 - Sensitive Data Exposure via Log File vulnerability CVE-2022-31098 Weave GitOps leaked cluster credentials into logs on connection errors CVE-2025-3911 Exposure in Docker Desktop logs of environment variables configured for running containers CVE-2024-55891 Information Disclosure via Exception Handling/Logger in TYPO3