CVE Catalog
CVE-2023-4327
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk0.10%
1th percentile - higher than 1% of all known CVEs
Summary
The Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data, and the keys used for encryption are accessible to any local user on Linux.
Risk Assessment
The exposure of sensitive data and encryption keys may lead to serious security breaches, including unauthorized access to data.
Recommendation
It is recommended to restrict access to the web interface and implement additional security measures to protect sensitive data and encryption keys.
Original NVD description (English source)
Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user on Linux