2269 matches found
Broadcom RAID Controller Security Vulnerability
The Broadcom RAID Controller is a series of RAID controllers from Broadcom Corporation USA. A security vulnerability exists in the Broadcom RAID Controller, which stems from a web interface where sensitive password information is exposed as a search parameter in the URL, making the product...
Broadcom RAID Controller Security Vulnerability
Broadcom RAID Controller is a series of RAID controllers from Broadcom Corporation USA. A security vulnerability exists in the Broadcom RAID Controller, which stems from a web interface that can easily expose a CIM private key stored in an insecure file, rendering the product susceptible to attac...
CVE-2023-4340: Undefined Security Weakness
Broadcom RAID Controller is vulnerable to Privilege escalation by taking advantage of the Session prints in the log file...
CVE-2023-4336: Undefined Security Weakness
Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard cookies with Secure attribute...
Broadcom RAID Controller 安全漏洞
The Broadcom RAID Controller is a series of RAID controllers from Broadcom Corporation. A security vulnerability exists in the Broadcom RAID Controller that stems from a session mismanagement issue in the web interface's Gateway Settings feature, which makes the product vulnerable to attack...
PT-2023-28737
Name of the Vulnerable Software and Affected Versions Broadcom RAID Controller affected versions not specified Description The Broadcom RAID Controller web interface is vulnerable to improper session management of active sessions on Gateway setup. Recommendations At the moment, there is no...
PT-2023-28824
Name of the Vulnerable Software and Affected Versions Broadcom RAID Controller affected versions not specified Description The Broadcom RAID Controller web interface is vulnerable to a client-side control bypass, which can lead to unauthorized data access for low-privileged users. Recommendations...
CVE-2023-4329: Undefined Security Weakness
Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard SESSIONID cookie with SameSite attribute...
PT-2023-28761
Name of the Vulnerable Software and Affected Versions Broadcom RAID Controller affected versions not specified Description The Broadcom RAID Controller web interface is vulnerable due to an insecure default HTTP configuration that does not safeguard the SESSIONID cookie with the SameSite attribut...
CVE-2023-4335: Missing Authentication for Critical Function
Broadcom RAID Controller Web server nginx is serving private server-side files without any authentication on Linux...
PT-2023-28767 · Broadcom · Broadcom Raid Controller
Name of the Vulnerable Software and Affected Versions: Broadcom RAID Controller affected versions not specified Description: The Broadcom RAID Controller web interface is vulnerable to a Denial of Service DoS that can be caused by an authenticated user to the REST API Interface. Recommendations: ...
PT-2023-28774
Name of the Vulnerable Software and Affected Versions Broadcom RAID Controller affected versions not specified Description The Broadcom RAID Controller web interface has an insecure default TLS configuration that supports obsolete and vulnerable TLS protocols. Recommendations At the moment, there...
PT-2023-28783 · Broadcom · Broadcom Raid Controller
Name of the Vulnerable Software and Affected Versions: Broadcom RAID Controller affected versions not specified Description: The Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data. The keys used for encryption are accessible to any local user on Windows...
PT-2023-28823 · Broadcom · Broadcom Raid Controller
Name of the Vulnerable Software and Affected Versions: Broadcom RAID Controller affected versions not specified Description: The Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to the improper use of ssl.rnd to set up a CIM connection. Recommendations: At the...
PT-2023-28796 · Broadcom · Broadcom Raid Controller Web Server
Name of the Vulnerable Software and Affected Versions: Broadcom RAID Controller Web server nginx affected versions not specified Description: The issue concerns the Broadcom RAID Controller Web server, which is based on nginx and is serving private server-side files without any authentication on...
PT-2023-28820 · Broadcom · Broadcom Raid Controller
Name of the Vulnerable Software and Affected Versions: Broadcom RAID Controller affected versions not specified Description: The issue is related to the creation of insecure folders by the Web GUI, which can lead to privilege escalation to root. Recommendations: At the moment, there is no...
PT-2023-28818 · Broadcom · Broadcom Raid Controller
Name of the Vulnerable Software and Affected Versions: Broadcom RAID Controller affected versions not specified Description: The Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM, which are stored with insecure file permissions. Recommendations: At the...
PT-2023-28808 · Broadcom · Broadcom Raid Controller
Name of the Vulnerable Software and Affected Versions: Broadcom RAID Controller affected versions not specified Description: The Broadcom RAID Controller web interface is vulnerable to improper session handling of managed servers on Gateway installation. No information is provided about the...
PT-2023-28822 · Broadcom · Broadcom Raid Controller
Name of the Vulnerable Software and Affected Versions: Broadcom RAID Controller affected versions not specified Description: The Broadcom RAID Controller web interface is vulnerable due to the exposure of sensitive password information in the URL as a URL search parameter. Recommendations: At the...