2269 matches found
PT-2023-28761
Name of the Vulnerable Software and Affected Versions Broadcom RAID Controller affected versions not specified Description The Broadcom RAID Controller web interface is vulnerable due to an insecure default HTTP configuration that does not safeguard the SESSIONID cookie with the SameSite attribut...
CVE-2023-4335: Missing Authentication for Critical Function
Broadcom RAID Controller Web server nginx is serving private server-side files without any authentication on Linux...
PT-2023-28767 · Broadcom · Broadcom Raid Controller
Name of the Vulnerable Software and Affected Versions: Broadcom RAID Controller affected versions not specified Description: The Broadcom RAID Controller web interface is vulnerable to a Denial of Service DoS that can be caused by an authenticated user to the REST API Interface. Recommendations: ...
PT-2023-28774
Name of the Vulnerable Software and Affected Versions Broadcom RAID Controller affected versions not specified Description The Broadcom RAID Controller web interface has an insecure default TLS configuration that supports obsolete and vulnerable TLS protocols. Recommendations At the moment, there...
PT-2023-28818 · Broadcom · Broadcom Raid Controller
Name of the Vulnerable Software and Affected Versions: Broadcom RAID Controller affected versions not specified Description: The Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM, which are stored with insecure file permissions. Recommendations: At the...
CVE-2023-4331: Use of a Broken or Risky Cryptographic Algorithm
Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocols...
PT-2023-28758
Name of the Vulnerable Software and Affected Versions Broadcom RAID Controller affected versions not specified Description The Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data. The keys used for encryption are accessible to any local user on Windows and Linux...
PT-2023-28819 · Broadcom · Broadcom Raid Controller
Name of the Vulnerable Software and Affected Versions: Broadcom RAID Controller affected versions not specified Description: The issue concerns a privilege escalation vulnerability in the Broadcom RAID Controller. It can be exploited by taking advantage of the session prints in the log file...
PT-2023-28776
Name of the Vulnerable Software and Affected Versions Broadcom RAID Controller affected versions not specified Description The Broadcom RAID Controller web interface is vulnerable due to improper permissions on the log file. This issue may allow unauthorized access or exploitation. There is no...
Broadcom RAID Controller Security Vulnerability
The Broadcom RAID Controller is a series of RAID controllers from Broadcom USA. A security vulnerability exists in the Broadcom RAID Controller that stems from a vulnerability that allows an attacker to exploit session printing in log files for elevation of privilege...
Broadcom RAID Controller Encryption Issue Vulnerability
The Broadcom RAID Controller is a series of RAID controllers from Broadcom Corporation USA. A security vulnerability exists in the Broadcom RAID Controller that stems from the web interface's TLS configuration that supports an outdated TLS protocol, making the product vulnerable to attack...
CVE-2023-4339: Undefined Security Weakness
Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file permissions...
PT-2023-28796 · Broadcom · Broadcom Raid Controller Web Server
Name of the Vulnerable Software and Affected Versions: Broadcom RAID Controller Web server nginx affected versions not specified Description: The issue concerns the Broadcom RAID Controller Web server, which is based on nginx and is serving private server-side files without any authentication on...
PT-2023-28823 · Broadcom · Broadcom Raid Controller
Name of the Vulnerable Software and Affected Versions: Broadcom RAID Controller affected versions not specified Description: The Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to the improper use of ssl.rnd to set up a CIM connection. Recommendations: At the...
Broadcom RAID Controller Access Control Error Vulnerability
The Broadcom RAID Controller is a series of RAID controllers from Broadcom Corporation USA. A security vulnerability exists in the Broadcom RAID Controller that originates from allowing a web server to serve private files to an unauthenticated attacker...
Broadcom RAID Controller Security Vulnerability
Broadcom RAID Controller is a series of RAID controllers from Broadcom USA. A security vulnerability exists in the Broadcom RAID Controller, which stems from a security flaw in the web interface that allows any local user on Linux to access encryption keys, leading to the disclosure of sensitive...
CVE-2023-4325: Undefined Security Weakness
Broadcom RAID Controller web interface is vulnerable due to usage of Libcurl with LSA has known vulnerabilities...
PT-2023-28815 · Broadcom · Broadcom Raid Controller
Name of the Vulnerable Software and Affected Versions: Broadcom RAID Controller affected versions not specified Description: The Broadcom RAID Controller web interface is vulnerable due to an insecure default HTTP configuration that does not provide X-Content-Type-Options Headers. This issue...
PT-2023-28805
Name of the Vulnerable Software and Affected Versions Broadcom RAID Controller affected versions not specified Description The Broadcom RAID Controller web interface is vulnerable due to an insecure default HTTP configuration that does not safeguard cookies with the Secure attribute...