PT-2025-29976 · Brocade · Brocade Ascg

Published 2025-07-17 · Updated 2026-02-02 · CVE-2025-6391

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Brocade ASCG versions prior to 3.3.0

Description Brocade ASCG versions prior to 3.3.0 log JSON Web Tokens (JWT) in log files. An attacker with access to these log files can extract the unencrypted tokens, potentially leading to unauthorized access, session hijacking, and information disclosure. A JWT is a compact, URL-safe means of representing claims to be transferred between two parties.

Recommendations Update Brocade ASCG to version 3.3.0 or later.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2025-6391

Affected Products

Brocade Ascg

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-6391 · Security Note
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/35951 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-6391 · Vendor Advisory
• https://t.me/cvetracker/28083 · Telegram Post
• https://t.me/cvenotify/129790 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1946068108709449728 · Twitter Post
• https://t.me/cveNotify/129790 · Telegram Post
• https://twitter.com/CVEnew/status/1945970854916968630 · Twitter Post
• https://t.me/cveNotify/150573 · Telegram Post