Non notée
CVE-2023-4335 Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux
Description
Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| LSI Storage Authority (LSA) 7.017 | premières → < 7.017.011.000 | 7.017.011.000 |
| RAID Web Console 3 (RWC3) 7.017 | premières → < 7.017.011.000 | 7.017.011.000 |
| lsi_storage_authority 7.017 | premières → < 7.017.011.000 | 7.017.011.000 |
| raid_web_console_3 7.017 | premières → < 7.017.011.000 | 7.017.011.000 |
Autres CVE de LSI Storage Authority (LSA)
Les 22 CVE de LSI Storage Authority (LSA) →
CVE-2023-4329
Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not…
Non notée
CVE-2023-4327
Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption…
Non notée
CVE-2023-4328
Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are…
Non notée
CVE-2023-4325
Broadcom RAID Controller web interface is vulnerable due to usage of Libcurl with LSA has known vulnerabilities
Non notée