This vulnerability arises from incomplete log sanitization in Brocade SANnav versions before 3.0.1a. During the process of bulk IPsec policy collection, extension switch pre-shared keys are written to system logs without proper masking or removal. An attacker or unauthorized user with read access to container logs or support archives can extract these keys, which may lead to the compromise of encrypted network tunnels that rely on these keys for security.

The exposure of pre-shared keys in logs can lead to the compromise of encrypted network tunnels, undermining the confidentiality and integrity of network communications. Since the keys are stored in logs accessible to users with read permissions, unauthorized disclosure is possible, potentially allowing attackers to decrypt or manipulate network traffic.

A fix is available in Brocade SANnav version 3.0.1a that addresses the incomplete log sanitization issue. Users should upgrade to version 3.0.1a or later to prevent sensitive keys from being logged. Until the upgrade is applied, restrict read access to container logs and support archives to trusted personnel only.