The class FileTransfer implemented in Brocade SANnav before v2.3.1, v2.3.0a, uses the ssh-rsa signature scheme, which has a SHA-1 hash.
The vulnerability could allow a remote, unauthenticated attacker to perform a man-in-the-middle attack.
References
Configurations
No configuration.
History
17 Apr 2024, 19:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-04-17 19:15
Updated : 2024-04-17 20:08
NVD link : CVE-2024-29950
Mitre link : CVE-2024-29950
CVE.ORG link : CVE-2024-29950
JSON object : View
Products Affected
No product.
CWE
CWE-326
Inadequate Encryption Strength