Web Interface Vulnerability in Brocade ASCG Affects Secure Communication

CVE-2024-1509

What is CVE-2024-1509?

The Brocade ASCG Web Interface prior to version 3.2.0 lacks adequate enforcement of HTTP Strict Transport Security (HSTS), which is crucial for ensuring secure communications between clients and servers. This oversight enables potential downgrade attacks and SSL-stripping man-in-the-middle attacks, compromising the integrity of sensitive information. Furthermore, it diminishes protections against cookie-hijacking attempts, leaving users and organizations vulnerable to various security threats.

References