HIGH🇵🇱 Wersja polska

CVE-2026-0869

CVSS 8.3v4.0pub. 2026-03-03upd. 2026-03-09

Authentication bypass in Brocade ASCG 3.4.0 Could allow an unauthorized user to perform ASCG operations related to Brocade Support Link(BSL) and streaming configuration. and could even disable the ASCG application or disable use of BSL data collection on Brocade switches within the fabric.

CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Broadcom Brocade Active Support Connectivity Gateway

    APP
    Broadcom
    3.4.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2025-6391HIGH7.1same product

Brocade ASCG before 3.3.0 logs JSON Web Tokens (JWT) in log files. An attacker with access to the log files ...

CVE-2025-7398HIGH8.6same product

Brocade ASCG before 3.3.0 allows for the use of medium strength cryptography algorithms on internal ports port...

CVE-2024-1509HIGH7.6same product

Brocade ASCG before 3.2.0 Web Interface is not enforcing HSTS, as defined by RFC 6797. HSTS is an optional r...

CVE-2021-40438CRITICAL9.0⚠ KEVPL ✓same vendor

SSRF w mod_proxy Apache HTTP Server — przekierowanie żądań przez atakującego

CVE-2018-1273CRITICAL9.8⚠ KEVPL ✓same vendor

RCE w Spring Data Commons — podatność property bindera