CVE-2025-6391 JSON Web Token (JWT) Exposure in Log Files
Attackers with log access can steal JWTs from Brocade ASCG logs, enabling session hijacking and unauthorized access.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-6391?
CVE-2025-6391 is a high-severity vulnerability in Broadcom Brocade ASCG, published on 17 Jul 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Brocade ASCG before 3.3.0 logs JSON Web Tokens (JWT) in log files. An attacker with access to the log files can withdraw the unencrypted tokens with security implications, such as unauthorized access, session hijacking, and information disclosure.
Weakness: CWE-532
Which versions are affected by CVE-2025-6391?
It affects 1 product.
Products include Broadcom Brocade Active Support Connectivity Gateway.
How do I fix CVE-2025-6391?
No fix has been published for CVE-2025-6391 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-6391 being exploited?
There is no known exploitation of CVE-2025-6391 in the wild and no public exploit code.
Other vulnerabilities in Broadcom Brocade ASCG
- CVE-2026-85421 Missing authorization in Brocade Active Support Connectivity Gateway
- CVE-2026-85489 Missing authorization in Brocade Active Support Connectivity Gateway
- CVE-2026-85423 A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0.
- CVE-2026-85486 Code injection in Brocade Active Support Connectivity Gateway
- CVE-2026-85487 Path traversal in Brocade Active Support Connectivity Gateway
Sources
Also known as GHSA-cqgv-gr59-9qf6.