CVE-2025-6391 | BDVDB-2026-286539 Detail
BroadcomBrocade ASCG
Description#
Brocade ASCG before 3.3.0 logs JSON Web Tokens (JWT) in log files. An attacker with access to the log files can withdraw the unencrypted tokens with security implications, such as unauthorized access, session hijacking, and information disclosure.
Impact#
CAPEC-37 Retrieve Embedded Sensitive Data
Weaknesses#
- CWE-532 Insertion of Sensitive Information into Log File
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.