The authentication mechanism, in Brocade SANnav versions before v2.0, logs plaintext account credentials at the ?trace? and the 'debug' logging level; which could allow a local authenticated attacker to access sensitive information.

References

• https://nvd.nist.gov/vuln/detail/CVE-2019-16206
• https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-865