Skip to content
Sign in
7.6 High

CVE-2024-1509 Brocade ASCG before 3.2.0 Web Interface is not enforcing HSTS, as defined by RFC 6797

Description

Brocade ASCG before 3.2.0 Web Interface is not enforcing HSTS, as defined by RFC 6797. HSTS is an optional response header that can be configured on the server to instruct the browser to only communicate via HTTPS. The lack of HSTS allows downgrade attacks, SSL-stripping man-in-the-middle attacks, and weakens cookie-hijacking protections.

Affected products and versions

Product Affected versions Fixed in
ASCG Versions not published

Other CVEs of ASCG

The 2 CVEs of ASCG →
CVE-2026-0869 Authentication bypass in Brocade ASCG 3.4.0 Could allow an unauthorized user to perform ASCG operations related to… 8.3 High
Track this CVE