CVE-2024-29963 Information

Description

Brocade SANnav OVA before v2.3.1 and v2.3.0a contain hardcoded keys used by Docker to reach remote registries over TLS. TLS connections with an exposed key allow an attacker to MITM the traffic. Note: Brocade SANnav doesn’t have access to remote Docker registries.

Reference

https://support.broadcom.com/external/content/SecurityAdvisories/0/23247