Description (CNA)
Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation. When an authenticated user submits a configuration form, the submitted text could immediately be processed. A malicious actor with basic access can supply crafted input to execute arbitrary code on the server and take control of the application.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Brocade / Brocade Active Support Connectivity Gateway | affected 0 before 3.5.0 |
CWE
CWE-95
References
ADP enrichment
No English description supplied.
No references supplied.