CVE-2023-4325

CVE-2023-4325 affects the Broadcom Broadcom RAID Controller web interface, where the vulnerability stems from the software’s usage of Libcurl with LSA. The entry is supported by multiple connected sources (Red Hat, NVD, CVE listing, PT Security, CNNVD, Intel advisory) that describe the issue in t...

CVE-2023-4326

The CVE-2023-4326 entry concerns the Broadcom RAID Controller web interface, where the vulnerability arises from an insecure default TLS configuration that supports obsolete SHA1-based ciphersuites. Affected component is the web interface of Broadcom RAID Controllers; root cause is weak TLS ciphe...

CVE-2023-4324 Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP Content-Security-Policy headers

Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP Content-Security-Policy headers...

CVE-2023-4331 Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocols

Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocols...

CVE-2023-4335 Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux

Broadcom RAID Controller Web server nginx is serving private server-side files without any authentication on Linux...

CVE-2023-4332

CVE-2023-4332 affects Broadcom RAID Controller web interface. The vulnerability arises from improper permissions on the log file, enabling unauthorized access to log data. The base CVSS v3.1 score is 7.5 (High) with Confidentiality Impact: High; other impacts are None. The issue is documented acr...

CVE-2023-4335 Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux

Broadcom RAID Controller Web server nginx is serving private server-side files without any authentication on Linux...

CVE-2023-4331

CVE-2023-4331 concerns the Broadcom RAID Controller web interface, which is described as using an insecure default TLS configuration that supports obsolete and vulnerable TLS protocols. The combination of a network-accessible web interface and weak TLS, per the sources, implies potential confiden...

CVE-2023-4334 Broadcom RAID Controller Web server (nginx) is serving private files without any authentication

Broadcom RAID Controller Web server nginx is serving private files without any authentication...

CVE-2023-4331 Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocols

Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocols...

CVE-2023-4333 Broadcom RAID Controller web interface doesn’t enforce SSL cipher ordering by server

Broadcom RAID Controller web interface doesn’t enforce SSL cipher ordering by server...

CVE-2023-4335

The CVE-2023-4335 issue affects the Broadcom RAID Controller Web server (nginx) on Linux, where private server-side files are served without authentication due to a flaw in access control. Impact is exposure of confidential information; CVSS base score 7.5 (HIGH) with network attack vector and no...

CVE-2023-4334

The CVE-2023-4334 issue affects Broadcom RAID Controller Web server (nginx); the vulnerability arises because the web server serves private files without requiring authentication, enabling exposure of private data over the network. Public sources in the connected documents corroborate that unauth...

CVE-2023-4334 Broadcom RAID Controller Web server (nginx) is serving private files without any authentication

Broadcom RAID Controller Web server nginx is serving private files without any authentication...

CVE-2023-4332 Broadcom RAID Controller web interface is vulnerable due to Improper permissions on the log file

Broadcom RAID Controller web interface is vulnerable due to Improper permissions on the log file...

CVE-2023-4333

CVE-2023-4333 affects the Broadcom RAID Controller web interface, where the server does not enforce SSL cipher ordering. The NVD entry notes a Low attack vector and Low privileges required with Local access, and a High confidentiality impact but no integrity/availability impact. The connected Red...

CVE-2023-4333 Broadcom RAID Controller web interface doesn’t enforce SSL cipher ordering by server

Broadcom RAID Controller web interface doesn’t enforce SSL cipher ordering by server...

CVE-2023-4332 Broadcom RAID Controller web interface is vulnerable due to Improper permissions on the log file

Broadcom RAID Controller web interface is vulnerable due to Improper permissions on the log file...

CVE-2023-4336 Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard cookies with Secure attribute

Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard cookies with Secure attribute...

CVE-2023-4337 Broadcom RAID Controller web interface is vulnerable to improper session handling of managed servers on Gateway installation

Broadcom RAID Controller web interface is vulnerable to improper session handling of managed servers on Gateway installation...