1. Home
  2. CVE Database
  3. CVE-2025-6391
CRITICAL · 9.1

CVE-2025-6391

Brocade ASCG before 3.3.0 logs JSON Web Tokens (JWT) in log files. An attacker with access to the log files can withdraw the unencrypted tokens with security implications, such as unauthorized acc...

Vulnerability Description

Brocade ASCG before 3.3.0 logs JSON Web Tokens (JWT) in log files. An attacker with access to the log files can withdraw the unencrypted tokens with security implications, such as unauthorized access, session hijacking, and information disclosure.

CVSS Score

9.1

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
BroadcomBrocade Active Support Connectivity Gateway<= 3.2.0

Related Weaknesses (CWE)

CWE-532

References

FAQ

What is CVE-2025-6391?

CVE-2025-6391 is a vulnerability with a CVSS score of 9.1 (CRITICAL). Brocade ASCG before 3.3.0 logs JSON Web Tokens (JWT) in log files. An attacker with access to the log files can withdraw the unencrypted tokens with security implications, such as unauthorized acc...

How severe is CVE-2025-6391?

CVE-2025-6391 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2025-6391?

Check the references section above for vendor advisories and patch information. Affected products include: Broadcom Brocade Active Support Connectivity Gateway.