CVE-2023-4329

CriticalCVSS 9.8

Published: 15/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.59%

43th percentile - higher than 43% of all known CVEs

Summary

The Broadcom RAID Controller web interface is vulnerable due to an insecure default HTTP configuration that does not safeguard the SESSIONID cookie with the SameSite attribute.

Risk Assessment

The lack of proper protection for the SESSIONID cookie may lead to Cross-Site Request Forgery (CSRF) attacks, jeopardizing user session integrity.

Recommendation

It is recommended to configure the SameSite attribute for the SESSIONID cookie to enhance the security of the web interface.

Original NVD description (English source)

Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard SESSIONID cookie with SameSite attribute