CVE-2025-12679 is a medium-severity vulnerability affecting Brocade SANnav before version 2.4.0b, where the Password-Based Encryption (PBE) key is inadvertently printed in plaintext within the system audit log during a migration. This allows a remote authenticated attacker with privileged access to the server's audit logs to retrieve the PBE key. The vulnerability has a CVSS score of 6.5, indicating high confidentiality impact but requiring privileged access to the host server's local audit logs, which are not controlled by SANnav. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 2.4.0bCPE matchmatch criteria | cpe:2.3:a:broadcom:sannav:*:*:*:*:*:*:*:* |
CVSS version used by this source: 4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.