CVE-2023-4336
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk43th percentile - higher than 43% of all known CVEs
Summary
The Broadcom RAID Controller web interface is vulnerable due to an insecure default HTTP configuration that does not safeguard cookies with the Secure attribute.
Risk Assessment
The lack of cookie protection may lead to session hijacking and unauthorized access to user data, posing a significant threat to the organization.
Recommendation
It is recommended to configure the web interface to ensure cookies are secured with the Secure attribute and to review security settings.
Other vulnerabilities in Interfejs webowy kontrolera RAID firmy Broadcom
See all- CVE-2023-4331High
The Broadcom RAID Controller web interface has a vulnerability related to an insecure default TLS configuration that supports obsolete and vulnerable TLS protocols.
- CVE-2023-4326High
The Broadcom RAID Controller web interface is vulnerable due to an insecure default TLS configuration that supports obsolete SHA1-based ciphersuites.
Original NVD description (English source)
Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard cookies with Secure attribute