What is CVE-2022-28164?

CVE-2022-28164 is a medium-severity vulnerability in Broadcom Sannav, classified under Use of a Broken or Risky Cryptographic Algorithm. CVSS score: 6.5/10. Published 2022-05-06.

How severe is CVE-2022-28164?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Broadcom Sannav

CVE-2022-28164

Brocade SANnav before SANnav 2.2.0 application uses the Blowfish symmetric encryption algorithm for the storage of passwords. This could allow an authenticated attacker to decrypt stored account passwords.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.003 (19.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Broadcom Sannav
N/a Brocade Sannav — versions Brocade SANNav before 2.2.0

Weakness classification (CWE)

CWE-327 — Use of a Broken or Risky Cryptographic Algorithm

References

sirt@brocade.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2022-28164?: CVE-2022-28164 is a medium-severity vulnerability in Broadcom Sannav, classified under Use of a Broken or Risky Cryptographic Algorithm. CVSS score: 6.5/10. Published 2022-05-06.
How severe is CVE-2022-28164?: Medium severity. CVSS v3 base score is 6.5 out of 10.