Skip to content

Vulnerabilities of Broadcom LSI Storage Authority (LSA)

Is your version affected?

CVE Summary Score Published
CVE-2023-4329 Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not… Not rated Aug 15, 2023
CVE-2023-4328 Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are… Not rated Aug 15, 2023
CVE-2023-4327 Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption… Not rated Aug 15, 2023
CVE-2023-4326 Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that supports obsolete… Not rated Aug 15, 2023
CVE-2023-4325 Broadcom RAID Controller web interface is vulnerable due to usage of Libcurl with LSA has known vulnerabilities Not rated Aug 15, 2023
CVE-2023-4324 Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP Content-Security-Policy … Not rated Aug 15, 2023
CVE-2023-4333 Broadcom RAID Controller web interface doesn’t enforce SSL cipher ordering by server Not rated Aug 15, 2023
CVE-2023-4332 Broadcom RAID Controller web interface is vulnerable due to Improper permissions on the log file Not rated Aug 15, 2023
CVE-2023-4331 Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and… Not rated Aug 15, 2023
CVE-2023-4335 Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux Not rated Aug 15, 2023
CVE-2023-4334 Broadcom RAID Controller Web server (nginx) is serving private files without any authentication Not rated Aug 15, 2023
CVE-2023-4338 Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not provide… Not rated Aug 15, 2023
CVE-2023-4337 Broadcom RAID Controller web interface is vulnerable to improper session handling of managed servers on Gateway… Not rated Aug 15, 2023
CVE-2023-4336 Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not… Not rated Aug 15, 2023
CVE-2023-4340 Broadcom RAID Controller is vulnerable to Privilege escalation by taking advantage of the Session prints in the log file Not rated Aug 15, 2023
CVE-2023-4339 Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure… Not rated Aug 15, 2023
CVE-2023-4343 Broadcom RAID Controller web interface is vulnerable due to exposure of sensitive password information in the URL as a… Not rated Aug 15, 2023
CVE-2023-4342 Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP strict-transport-security… Not rated Aug 15, 2023
CVE-2023-4341 Broadcom RAID Controller is vulnerable to Privilege escalation to root due to creation of insecure folders by Web GUI Not rated Aug 15, 2023
CVE-2023-4344 Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to… 9.8 Critical Aug 15, 2023
CVE-2023-4323 Broadcom RAID Controller web interface is vulnerable to improper session management of active sessions on Gateway setup Not rated Aug 15, 2023
CVE-2023-4345 Broadcom RAID Controller web interface is vulnerable client-side control bypass leads to unauthorized data access for… Not rated Aug 15, 2023

Other Broadcom products