CVE Catalog
CVE-2023-4335
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk0.49%
38th percentile - higher than 38% of all known CVEs
Summary
The Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux.
Risk Assessment
Lack of authentication may lead to unauthorized access to sensitive data, posing a significant security risk to the organization.
Recommendation
It is recommended to configure appropriate authentication mechanisms and restrict access to the web server to secure private files.
Other vulnerabilities in Broadcom RAID Controller Web server (nginx)
Original NVD description (English source)
Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux
Vulnerability data from NVD (NIST) · CISA KEV · EPSS