Aller au contenu
Se connecter
7.6 Élevée

CVE-2024-1509 Brocade ASCG before 3.2.0 Web Interface is not enforcing HSTS, as defined by RFC 6797

Description

Brocade ASCG before 3.2.0 Web Interface is not enforcing HSTS, as defined by RFC 6797. HSTS is an optional response header that can be configured on the server to instruct the browser to only communicate via HTTPS. The lack of HSTS allows downgrade attacks, SSL-stripping man-in-the-middle attacks, and weakens cookie-hijacking protections.

Produits et versions touchés

Produit Versions touchées Corrigé en
ASCG Versions non publiées

Autres CVE de ASCG

Les 2 CVE de ASCG →
CVE-2026-0869 Authentication bypass in Brocade ASCG 3.4.0 Could allow an unauthorized user to perform ASCG operations related to… 8.3 Élevée
Suivre cette CVE