CVE-2023-4334 Broadcom RAID Controller Web server (nginx) is serving private files without any authentication

Description

Broadcom RAID Controller Web server (nginx) is serving private files without any authentication

Produits et versions touchés

Produit	Versions touchées	Corrigé en
LSI Storage Authority (LSA) 7.017	premières → < 7.017.011.000	7.017.011.000
RAID Web Console 3 (RWC3) 7.017	premières → < 7.017.011.000	7.017.011.000

Autres CVE de LSI Storage Authority (LSA)

Les 22 CVE de LSI Storage Authority (LSA) →

CVE-2023-4329 Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not… Non notée CVE-2023-4327 Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption… Non notée CVE-2023-4328 Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are… Non notée CVE-2023-4325 Broadcom RAID Controller web interface is vulnerable due to usage of Libcurl with LSA has known vulnerabilities Non notée