CVE-2023-4334

HighCVSS 7.5

Published: 15/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.51%

39th percentile - higher than 39% of all known CVEs

Summary

The Broadcom RAID Controller Web server (nginx) is serving private files without any authentication.

Risk Assessment

The lack of authentication for accessing private files may lead to the exposure of sensitive data, posing a serious security threat to the organization.

Recommendation

It is recommended to configure appropriate authentication mechanisms on the server to secure access to private files.

Other vulnerabilities in Broadcom RAID Controller Web server (nginx)

CVE-2023-4335High
The Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux.

Original NVD description (English source)

Broadcom RAID Controller Web server (nginx) is serving private files without any authentication

Vulnerability data from NVD (NIST) · CISA KEV · EPSS