| Package | Affected versions | Patched versions |
|---|---|---|
| brocade active support connectivity gateway | ≤ 3.2.0 |
Brocade ASCG before 3.3.0 logs JSON Web Tokens (JWT) in log files. An attacker with access to the log files can withdraw the unencrypted tokens with security implications, such as unauthorized access, session hijacking, and information disclosure.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free