{"cve":{"cve_id":"CVE-2026-5047","is_kev":false,"kev_date_added":null,"kev_vendor_project":null,"kev_product":null,"kev_vulnerability_name":null,"kev_short_description":null,"kev_required_action":null,"kev_due_date":null,"kev_known_ransomware":null,"kev_notes":null,"kev_cwes":null,"epss_score":0.00196,"epss_percentile":0.08694,"epss_as_of":"2026-10-15","description":"A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and  authentication tokens in log files. The vulnerability could allow an authenticated attacker with access to the log file including the SANnav supportsave to access the passwords.","published_at":"2026-10-08T05:18:55.977000Z","last_modified_at":"2026-10-14T19:19:12.227000Z","cvss_v3_score":5.7,"cvss_v3_vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss_v3_severity":"MEDIUM","cvss_v4_score":8.2,"cvss_v4_vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N","cvss_v4_severity":"HIGH","ssvc_decision":null,"ssvc_exploitation":null,"ssvc_automatable":null,"ssvc_technical_impact":null,"cwes":["CWE-922"],"nvd_references":["https://support.broadcom.com/external/content/SecurityAdvisories/0/37933"],"vuln_status":"Analyzed","trending_score":null,"is_trending":false,"has_trended":false,"trended_number_one":false,"trending_peak_score":null,"trending_peak_rank":null,"started_trending_at":null,"trended_number_one_at":null,"summary_generated":null,"summary_generated_at":null,"summary_model":null,"created_at":"2026-10-08T07:37:29.208922Z","updated_at":"2026-10-15T05:15:06.890595Z"},"effective_severity":"HIGH","badges":[],"impact_analysis":[],"cvss_v3_decoded":{"version":"3.1","metrics":[{"metric":"AV","name":"Attack Vector","value":"A","value_label":"Adjacent"},{"metric":"AC","name":"Attack Complexity","value":"L","value_label":"Low"},{"metric":"PR","name":"Privileges Required","value":"L","value_label":"Low"},{"metric":"UI","name":"User Interaction","value":"N","value_label":"None"},{"metric":"S","name":"Scope","value":"U","value_label":"Unchanged"},{"metric":"C","name":"Confidentiality","value":"H","value_label":"High"},{"metric":"I","name":"Integrity","value":"N","value_label":"None"},{"metric":"A","name":"Availability","value":"N","value_label":"None"}]},"cvss_v4_decoded":{"version":"4.0","metrics":[{"metric":"AV","name":"Attack Vector","value":"A","value_label":"Adjacent"},{"metric":"AC","name":"Attack Complexity","value":"L","value_label":"Low"},{"metric":"AT","name":"Attack Requirements","value":"N","value_label":"None"},{"metric":"PR","name":"Privileges Required","value":"N","value_label":"None"},{"metric":"UI","name":"User Interaction","value":"P","value_label":"Passive"},{"metric":"VC","name":"Confidentiality (Vulnerable System)","value":"H","value_label":"High"},{"metric":"VI","name":"Integrity (Vulnerable System)","value":"N","value_label":"None"},{"metric":"VA","name":"Availability (Vulnerable System)","value":"N","value_label":"None"},{"metric":"SC","name":"Confidentiality (Subsequent System)","value":"H","value_label":"High"},{"metric":"SI","name":"Integrity (Subsequent System)","value":"N","value_label":"None"},{"metric":"SA","name":"Availability (Subsequent System)","value":"N","value_label":"None"}]},"affected":[{"vendor_slug":"broadcom","vendor_name":"broadcom","product_slug":"brocade-sannav","product_name":"Brocade SANnav","version_start":null,"version_start_inclusive":null,"version_end":"2.4.0b","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:a:broadcom:brocade_sannav:*:*:*:*:*:*:*:*"},{"vendor_slug":"brocade","vendor_name":"Brocade","product_slug":"brocade-sannav","product_name":"Brocade SANnav","version_start":"0","version_start_inclusive":true,"version_end":"2.4.0b","version_end_inclusive":false,"cpe23_uri":"cve5:brocade:brocade-sannav:0:2.4.0b"},{"vendor_slug":"brocade","vendor_name":"Brocade","product_slug":"brocade-sannav","product_name":"Brocade SANnav","version_start":"3.0.0","version_start_inclusive":true,"version_end":"3.0.0","version_end_inclusive":true,"cpe23_uri":"cve5:brocade:brocade-sannav:3.0.0:3.0.0"}],"exploit_refs":[],"news":[],"references":[{"url":"https://support.broadcom.com/external/content/SecurityAdvisories/0/37933","source_type":"VENDOR_ADVISORY","tags":["advisory"]}],"timeline":[{"type":"published","at":"2026-10-08T05:18:55.977000Z","label":"CVE published","source":null},{"type":"cvss_changed","at":"2026-10-15T05:15:06.890595Z","label":"CVSS score revised","source":"nvd"},{"type":"cvss_changed","at":"2026-10-15T05:15:06.890595Z","label":"CVSS score revised","source":"nvd"},{"type":"cvss_changed","at":"2026-10-15T05:15:06.890595Z","label":"CVSS score revised","source":"nvd"}]}