CVE-2023-4329

Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard SESSIONID cookie with SameSite attribute

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.7%

probabilidade de exploração

0.7%top 49% das CVEs

exploração observada

nãonenhuma fonte reporta

Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard SESSIONID cookie with SameSite attribute

Produtos afetados

Broadcom · LSI Storage Authority (LSA)Intel · RAID Web Console 3 (RWC3)

Referências

https://www.broadcom.com/support/resources/product-security-center https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00926.html