Sign in

Not rated

CVE-2023-4334 Broadcom RAID Controller Web server (nginx) is serving private files without any authentication

Description

Broadcom RAID Controller Web server (nginx) is serving private files without any authentication

Affected products and versions

Product	Affected versions	Fixed in
LSI Storage Authority (LSA) 7.017	earliest → < 7.017.011.000	7.017.011.000
RAID Web Console 3 (RWC3) 7.017	earliest → < 7.017.011.000	7.017.011.000

The 22 CVEs of LSI Storage Authority (LSA) →

CVE-2023-4329 Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not… Not rated CVE-2023-4327 Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption… Not rated CVE-2023-4328 Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are… Not rated CVE-2023-4325 Broadcom RAID Controller web interface is vulnerable due to usage of Libcurl with LSA has known vulnerabilities Not rated

Do you use LSI Storage Authority (LSA)?

Track this CVE Watch LSI Storage Authority (LSA) Check my SBOMs

www.cveye.io/en/cve/CVE-2023-4334

Timeline

Published August 15, 2023
Last modified November 4, 2025

References

www.broadcom.com www.broadcom.com

Track this CVE