Non notée
CVE-2023-4329 Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not…
Description
Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard SESSIONID cookie with SameSite attribute
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| LSI Storage Authority (LSA) 7.017 | premières → < 7.017.011.000 | 7.017.011.000 |
| RAID Web Console 3 (RWC3) 7.017 | premières → < 7.017.011.000 | 7.017.011.000 |
| lsi_storage_authority 7.017 | premières → < 7.017.011.000 | 7.017.011.000 |
| raid_web_console_3 7.017 | premières → < 7.017.011.000 | 7.017.011.000 |
Références
- www.broadcom.com www.broadcom.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de LSI Storage Authority (LSA)
Les 22 CVE de LSI Storage Authority (LSA) →
CVE-2023-4328
Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are…
Non notée
CVE-2023-4327
Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption…
Non notée
CVE-2023-4326
Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that supports obsolete…
Non notée
CVE-2023-4324
Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP Content-Security-Policy …
Non notée