6.5
Moyenne
CVE-2023-5648 In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG URL…
Description
In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG URL paths, aiding unauthenticated attackers to perform attacks such as Cross-Site Scripting, Clickjacking, Information disclosure, and more.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Active Support Connectivity Gateway 3.0 | premières → < 3.0 | 3.0 |