Not rated
CVE-2023-4345 Broadcom RAID Controller web interface is vulnerable client-side control bypass leads to unauthorized data access for…
Description
Broadcom RAID Controller web interface is vulnerable client-side control bypass leads to unauthorized data access for low privileged user
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| LSI Storage Authority (LSA) 7.017 | earliest → < 7.017.011.000 | 7.017.011.000 |
| RAID Web Console 3 (RWC3) 7.017 | earliest → < 7.017.011.000 | 7.017.011.000 |
Other CVEs of LSI Storage Authority (LSA)
The 22 CVEs of LSI Storage Authority (LSA) →
CVE-2023-4329
Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not…
Not rated
CVE-2023-4327
Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption…
Not rated
CVE-2023-4328
Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are…
Not rated
CVE-2023-4325
Broadcom RAID Controller web interface is vulnerable due to usage of Libcurl with LSA has known vulnerabilities
Not rated