CVE-2023-4335

Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux

Score

CVSS 3.1 7.5 High

Status

Modified - cret@cert.org

Published

2023-08-15

Last modified

2024-10-08

Weaknesses

CWE-306

Affected products

• Lsi Storage Authority (Broadcom)
• Lsi Storage Authority Lsa (Broadcom)
• Raid Controller Web Interface (Broadcom)
• Raid Web Console 3 (Intel)
• Raid Web Console 3 Rwc3 (Intel)

References

• https://www.broadcom.com/support/resources/product-security-center