6.5
Medium
CVE-2023-5648 In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG URL…
Description
In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG URL paths, aiding unauthenticated attackers to perform attacks such as Cross-Site Scripting, Clickjacking, Information disclosure, and more.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Active Support Connectivity Gateway 3.0 | earliest → < 3.0 | 3.0 |