Description
In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG URL paths, aiding unauthenticated attackers to perform attacks such as Cross-Site Scripting, Clickjacking, Information disclosure, and more.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Brocade | Active Support Connectivity Gateway | < 3.0 | 3.0 |