CVE-2023-4335 Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux

Broadcom RAID Controller Web server nginx is serving private server-side files without any authentication on Linux...

CVE-2023-4335 Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux

Broadcom RAID Controller Web server nginx is serving private server-side files without any authentication on Linux...

CVE-2023-4331

CVE-2023-4331 concerns the Broadcom RAID Controller web interface, which is described as using an insecure default TLS configuration that supports obsolete and vulnerable TLS protocols. The combination of a network-accessible web interface and weak TLS, per the sources, implies potential confiden...

CVE-2023-4332

CVE-2023-4332 affects Broadcom RAID Controller web interface. The vulnerability arises from improper permissions on the log file, enabling unauthorized access to log data. The base CVSS v3.1 score is 7.5 (High) with Confidentiality Impact: High; other impacts are None. The issue is documented acr...

CVE-2023-4335

The CVE-2023-4335 issue affects the Broadcom RAID Controller Web server (nginx) on Linux, where private server-side files are served without authentication due to a flaw in access control. Impact is exposure of confidential information; CVSS base score 7.5 (HIGH) with network attack vector and no...

CVE-2023-4334 Broadcom RAID Controller Web server (nginx) is serving private files without any authentication

Broadcom RAID Controller Web server nginx is serving private files without any authentication...

CVE-2023-4333 Broadcom RAID Controller web interface doesn’t enforce SSL cipher ordering by server

Broadcom RAID Controller web interface doesn’t enforce SSL cipher ordering by server...

CVE-2023-4334

The CVE-2023-4334 issue affects Broadcom RAID Controller Web server (nginx); the vulnerability arises because the web server serves private files without requiring authentication, enabling exposure of private data over the network. Public sources in the connected documents corroborate that unauth...

CVE-2023-4331 Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocols

Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocols...

CVE-2023-4331 Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocols

Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocols...

CVE-2023-4332 Broadcom RAID Controller web interface is vulnerable due to Improper permissions on the log file

Broadcom RAID Controller web interface is vulnerable due to Improper permissions on the log file...

CVE-2023-4332 Broadcom RAID Controller web interface is vulnerable due to Improper permissions on the log file

Broadcom RAID Controller web interface is vulnerable due to Improper permissions on the log file...

CVE-2023-4333

CVE-2023-4333 affects the Broadcom RAID Controller web interface, where the server does not enforce SSL cipher ordering. The NVD entry notes a Low attack vector and Low privileges required with Local access, and a High confidentiality impact but no integrity/availability impact. The connected Red...

CVE-2023-4336 Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard cookies with Secure attribute

Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard cookies with Secure attribute...

CVE-2023-4338 Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not provide X-Content-Type-Options Headers

Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not provide X-Content-Type-Options Headers...

CVE-2023-4336

CVE-2023-4336 affects Broadcom RAID Controller web interface. Root cause: insecure default HTTP configuration that fails to set the Secure attribute on cookies. Reported impact includes high confidentiality, integrity, and availability concerns (networks exploitability with no user interaction; b...

CVE-2023-4336 Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard cookies with Secure attribute

Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard cookies with Secure attribute...

CVE-2023-4337

CVE-2023-4337 affects the Broadcom RAID Controller web interface. The vulnerability arises from improper session handling of gateway-installed managed servers. Based on NVD metrics, it is a CRITICAL issue (CVSS v3.1: 9.8) with network access, no user interaction required, and high impact to confi...

CVE-2023-4337 Broadcom RAID Controller web interface is vulnerable to improper session handling of managed servers on Gateway installation

Broadcom RAID Controller web interface is vulnerable to improper session handling of managed servers on Gateway installation...

CVE-2023-4338

CVE-2023-4338 concerns the Broadcom RAID Controller web interface, where an insecure default HTTP configuration fails to set the X-Content-Type-Options header. The CVE entry is supported by multiple connected sources, which identify the affected component as the Broadcom/Intel RAID Web Console in...