Lucene search

K
cvelistCertccCVELIST:CVE-2023-4329
HistoryAug 15, 2023 - 6:25 p.m.

CVE-2023-4329 Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard SESSIONID cookie with SameSite attribute

2023-08-1518:25:38
certcc
www.cve.org
3
cve-2023-4329
broadcom
raid controller
web interface
insecure
http configuration
sessionid cookie
samesite attribute

AI Score

9.6

Confidence

High

EPSS

0.002

Percentile

56.6%

Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard SESSIONID cookie with SameSite attribute

CNA Affected

[
  {
    "defaultStatus": "affected",
    "product": "LSI Storage Authority (LSA)",
    "vendor": "Broadcom",
    "versions": [
      {
        "lessThan": "7.017.011.000",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "RAID Web Console 3 (RWC3)",
    "vendor": "Intel",
    "versions": [
      {
        "lessThan": "7.017.011.000",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

AI Score

9.6

Confidence

High

EPSS

0.002

Percentile

56.6%

Related for CVELIST:CVE-2023-4329