CVE-2023-5648 — Brocade / Active Support Connectivity Gateway

CVE-2023-5648

Brocade / Active Support Connectivity Gateway PUBLISHED

Description (CNA)

In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG URL paths, aiding unauthenticated attackers to perform attacks such as Cross-Site Scripting, Clickjacking, Information disclosure, and more.

Affected (CNA)

Vendor / product	Versions
Brocade / Active Support Connectivity Gateway	affected 0 before 3.0

CWE

CWE-79

References

https://support.broadcom.com/external/content/SecurityAdvisories/0/22715

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.