CVE-2023-5648

CVE-2023-5648: Several security-related HTTP headers were missing in Brocade ASCG prior to v3.0, which could facilitate attacks such as cross-site scripting, clickjacking, and information disclosure. The Brocade security advisories (BSNSA22715, and later BSNSA22786) show ASCG updates addressing t...

Several security-related HTTP Headers were missing (CVE-2023-5648)

In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG URL paths, aiding unauthenticated attackers to perform attacks such as Cross-Site Scripting, Clickjacking, Information disclosure, and more...