A flaw in Brocade SANnav versions prior to 3.0.1 can cause the Fabric OS switch administrator password to be written in clear text to a memory swap file when the SANnav server experiences an out‑of‑memory condition. An authenticated admin with access to the host machine may view the swap file and retrieve the password, potentially enabling further access to the Fabric OS environment.

The vulnerability affects installations of Brocade SANnav running on a server hosting the SANnav virtual machine. Only versions earlier than 3.0.1 are impacted. Brocade has released a security update in SANnav 3.0.1 that eliminates the flaw.

The CVSS score of 5.6 indicates moderate severity. The EPSS score is not available and the flaw is not listed in the CISA KEV catalog. Exploitation requires an authenticated admin who can access the server and that the server undergoes an OOM event, so the attack surface is limited, but the knowledge of plain‑text credentials is still useful to an attacker who has the necessary access.