CVE-2023-4338 Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not provide X-Content-Type-Options Headers

Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not provide X-Content-Type-Options Headers...

CVE-2023-4338

CVE-2023-4338 concerns the Broadcom RAID Controller web interface, where an insecure default HTTP configuration fails to set the X-Content-Type-Options header. The CVE entry is supported by multiple connected sources, which identify the affected component as the Broadcom/Intel RAID Web Console in...

CVE-2023-4336 Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard cookies with Secure attribute

Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard cookies with Secure attribute...

CVE-2023-4336 Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard cookies with Secure attribute

Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard cookies with Secure attribute...

CVE-2023-4336

CVE-2023-4336 affects Broadcom RAID Controller web interface. Root cause: insecure default HTTP configuration that fails to set the Secure attribute on cookies. Reported impact includes high confidentiality, integrity, and availability concerns (networks exploitability with no user interaction; b...

CVE-2023-4337

CVE-2023-4337 affects the Broadcom RAID Controller web interface. The vulnerability arises from improper session handling of gateway-installed managed servers. Based on NVD metrics, it is a CRITICAL issue (CVSS v3.1: 9.8) with network access, no user interaction required, and high impact to confi...

CVE-2023-4340 Broadcom RAID Controller is vulnerable to Privilege escalation by taking advantage of the Session prints in the log file

Broadcom RAID Controller is vulnerable to Privilege escalation by taking advantage of the Session prints in the log file...

CVE-2023-4340 Broadcom RAID Controller is vulnerable to Privilege escalation by taking advantage of the Session prints in the log file

Broadcom RAID Controller is vulnerable to Privilege escalation by taking advantage of the Session prints in the log file...

CVE-2023-4340

Summary: CVE-2023-4340 affects the Broadcom RAID Controller, enabling privilege escalation by exploiting how session prints are logged. The vulnerability description appears consistently across initial and connected records (Red Hat, NVD, CNNVD, CVE listing). Affected product/area: Broadcom RAID ...

CVE-2023-4339 Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file permissions

Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file permissions...

CVE-2023-4339 Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file permissions

Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file permissions...

CVE-2023-4339

CVE-2023-4339 affects the Broadcom RAID Controller web interface. The vulnerability is the exposure of CIM private keys stored with insecure file permissions, leading to potential confidentiality impact. Root cause: CIM private keys stored in insecure permissions on the Broadcom RAID Controller w...

CVE-2023-4344 Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection

Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection...

CVE-2023-4343 Broadcom RAID Controller web interface is vulnerable due to exposure of sensitive password information in the URL as a URL search parameter

Broadcom RAID Controller web interface is vulnerable due to exposure of sensitive password information in the URL as a URL search parameter...

CVE-2023-4341 Broadcom RAID Controller is vulnerable to Privilege escalation to root due to creation of insecure folders by Web GUI

Broadcom RAID Controller is vulnerable to Privilege escalation to root due to creation of insecure folders by Web GUI...

CVE-2023-4344

Summary: CVE-2023-4344 affects the Broadcom RAID Controller web interface, where the vulnerability stems from insufficient randomness due to improper use of ssl.rnd to set up CIM connections. Affected product/where it’s exposed: Broadcom RAID Controller web interface (Broadcom RAID Controller fam...

CVE-2023-4343 Broadcom RAID Controller web interface is vulnerable due to exposure of sensitive password information in the URL as a URL search parameter

Broadcom RAID Controller web interface is vulnerable due to exposure of sensitive password information in the URL as a URL search parameter...

CVE-2023-4342 Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP strict-transport-security policy

Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP strict-transport-security policy...

CVE-2023-4343

CVE-2023-4343 affects the Broadcom RAID Controller web interface, where sensitive password information is exposed in the URL as a search parameter. This leads to potential information disclosure by inspecting URLs. The provided documents do not include explicit exploit details or a mitigated/fixe...

CVE-2023-4342

CVE-2023-4342 affects the Broadcom RAID Controller web interface. Root cause: insecure defaults due to a missing HTTP Strict-Transport-Security policy. Documented impact indicates high confidentiality, integrity, and availability risk from a network-accessible web interface, with exploitation det...