Brocade ASCG vulnerabilities

2 known vulnerabilities in Brocade ASCG from Broadcom. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Brocade ASCG: Cleartext Storage of Sensitive Information

  CVE-2025-7397Jul 17, 2025Broadcom

  A vulnerability in the ascgshell, of Brocade ASCG before 3.3.0 stores any command executed in the Command Line Interface (CLI) in plain text within the command history. A local authenticated user that can access sensitive information like passwords within the

• 9.1 Critical severity

  Brocade ASCG: Insertion of Sensitive Information into Log File

  CVE-2025-6391Jul 17, 2025Broadcom

  Brocade ASCG before 3.3.0 logs JSON Web Tokens (JWT) in log files. An attacker with access to the log files can withdraw the unencrypted tokens with security implications, such as unauthorized access, session hijacking, and information disclosure.