QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2024-1509

Back to search

CVE-2024-1509

Published: Feb 28, 2025

Modified: Mar 4, 2025

PUBLISHED

Description

Brocade ASCG before 3.2.0 Web Interface is not enforcing HSTS, as defined by RFC 6797. HSTS is an optional response header that can be configured on the server to instruct the browser to only communicate via HTTPS. The lack of HSTS allows downgrade attacks, SSL-stripping man-in-the-middle attacks, and weakens cookie-hijacking protections.

VendorProductVersions

Brocade

ASCG

affected
before 3.2.0

Weaknesses (CWE)

CWE-523

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now