This vulnerability involves the insertion of sensitive information into application log files by the job scheduling component of Brocade SANnav. When scheduled support save jobs or similar operations run, sensitive parameters including external server passwords and archive protection keys are recorded in clear text within logs. This exposure allows local or authenticated users who can access these logs or support bundles to obtain sensitive credentials, potentially leading to unauthorized access to backup or archive resources. The CVSS 4.0 vector indicates the attack requires local access with low complexity and no user interaction, with high impact on confidentiality.

Sensitive credentials are exposed in application logs in clear text, enabling local or authenticated users with log access to retrieve passwords and keys. This can lead to unauthorized access to remote backup targets or protected archives, compromising confidentiality and potentially the integrity of backup data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to application logs and support bundles to trusted users only to minimize exposure of sensitive credentials.