Incomplete property masking in the SANnav logging subsystem
Incomplete property masking in the SANnav logging subsystem permits SNMP authentication and privacy passwords to be recorded in application logs under specific configuration conditions. Individuals with read access to system logs or support bundles can retrieve these credentials, leading to unauthorized read or management access to monitored switch environments
CVE-2026-85417
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-85417
SANnav
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"vendor": "Brocade",
"product": "SANnav",
"versions": [
{
"status": "affected",
"changes": [
{
"at": "3.1.0a",
"status": "unaffected"
}
],
"version": "0",
"lessThan": "3.1.0a",
"versionType": "Brocade SANnac"
}
],
"defaultStatus": "unaffected"
}
]- Related CVEs
- CVE-2026-85417
Source reference:
/cveMetadata/cveId
Publisher severity
medium
Source reference: /containers/cna/metrics
- Event
- #3904 · Revision 1
- Added to Heist Feed
- Publisher date