Not rated
CVE-2023-4324 Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP Content-Security-Policy …
Description
Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP Content-Security-Policy headers
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| LSI Storage Authority (LSA) 7.017 | earliest → < 7.017.011.000 | 7.017.011.000 |
| RAID Web Console 3 (RWC3) 7.017 | earliest → < 7.017.011.000 | 7.017.011.000 |
| lsi_storage_authority 7.017 | earliest → < 7.017.011.000 | 7.017.011.000 |
| raid_web_console_3 7.017 | earliest → < 7.017.011.000 | 7.017.011.000 |
References
- www.broadcom.com www.broadcom.com
Timeline
- Published
- Last modified
Other CVEs of LSI Storage Authority (LSA)
The 22 CVEs of LSI Storage Authority (LSA) →
CVE-2023-4326
Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that supports obsolete…
Not rated
CVE-2023-4327
Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption…
Not rated
CVE-2023-4328
Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are…
Not rated
CVE-2023-4329
Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not…
Not rated