Not rated
CVE-2023-4335 Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux
Description
Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| LSI Storage Authority (LSA) 7.017 | earliest → < 7.017.011.000 | 7.017.011.000 |
| RAID Web Console 3 (RWC3) 7.017 | earliest → < 7.017.011.000 | 7.017.011.000 |
| lsi_storage_authority 7.017 | earliest → < 7.017.011.000 | 7.017.011.000 |
| raid_web_console_3 7.017 | earliest → < 7.017.011.000 | 7.017.011.000 |
References
- www.broadcom.com www.broadcom.com
Timeline
- Published
- Last modified
Other CVEs of LSI Storage Authority (LSA)
The 22 CVEs of LSI Storage Authority (LSA) →
CVE-2023-4329
Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not…
Not rated
CVE-2023-4327
Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption…
Not rated
CVE-2023-4328
Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are…
Not rated
CVE-2023-4325
Broadcom RAID Controller web interface is vulnerable due to usage of Libcurl with LSA has known vulnerabilities
Not rated