Brocade ASCG 安全漏洞

Brocade ASCG is a network feature offered by the American company Brocade. It is primarily used to simplify SAN architectures and optimize resource utilization. Version 3.4.0 of Brocade ASCG contains a security vulnerability. This vulnerability stems from an authentication bypass mechanism, which...

CVE-2024-1509

Brocade ASCG before 3.2.0 Web Interface is not enforcing HSTS, as defined by RFC 6797. HSTS is an optional response header that can be configured on the server to instruct the browser to only communicate via HTTPS. The lack of HSTS allows downgrade attacks, SSL-stripping man-in-the-middle attacks...