Not rated
CVE-2023-4329 Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not…
Description
Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard SESSIONID cookie with SameSite attribute
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| LSI Storage Authority (LSA) 7.017 | earliest → < 7.017.011.000 | 7.017.011.000 |
| RAID Web Console 3 (RWC3) 7.017 | earliest → < 7.017.011.000 | 7.017.011.000 |
| lsi_storage_authority 7.017 | earliest → < 7.017.011.000 | 7.017.011.000 |
| raid_web_console_3 7.017 | earliest → < 7.017.011.000 | 7.017.011.000 |
References
- www.broadcom.com www.broadcom.com
Timeline
- Published
- Last modified
Other CVEs of LSI Storage Authority (LSA)
The 22 CVEs of LSI Storage Authority (LSA) →
CVE-2023-4328
Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are…
Not rated
CVE-2023-4327
Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption…
Not rated
CVE-2023-4326
Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that supports obsolete…
Not rated
CVE-2023-4324
Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP Content-Security-Policy …
Not rated