Broadcom RAID Controller web interface vulnerabilities
5 known CVE vulnerabilities in Broadcom RAID Controller web interface, translated and rated.
- CVE-2023-4342Critical
The Broadcom RAID Controller web interface is vulnerable due to insecure defaults lacking an HTTP Strict-Transport-Security policy.
- CVE-2023-4329Critical
The Broadcom RAID Controller web interface is vulnerable due to an insecure default HTTP configuration that does not safeguard the SESSIONID cookie with the SameSite attribute.
- CVE-2023-4339High
The Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file permissions.
- CVE-2023-4328Medium
The Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data, and the keys used for encryption are accessible to any local user on Windows.
- CVE-2023-4327Medium
The Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data, and the keys used for encryption are accessible to any local user on Linux.