The class FileTransfer implemented in Brocade SANnav...
High severity
Unreviewed
Published
Apr 17, 2024
to the GitHub Advisory Database
Description
Published by the National Vulnerability Database
Apr 17, 2024
Published to the GitHub Advisory Database
Apr 17, 2024
The class FileTransfer implemented in Brocade SANnav before v2.3.1, v2.3.0a, uses the ssh-rsa signature scheme, which has a SHA-1 hash.
The vulnerability could allow a remote, unauthenticated attacker to perform a man-in-the-middle attack.
References