broadcom raid controller web interface vulnerabilities (CVE)

CVE records published for broadcom raid controller web interface, newest first. Follow to get an email when a new one appears.

8 results
9.8Critical
CVE-2023-4344
broadcom raid controller web interface

Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection

7.5High
CVE-2023-4343
broadcom raid controller web interface

Broadcom RAID Controller web interface is vulnerable due to exposure of sensitive password information in the URL as a URL search parameter

9.8Critical
CVE-2023-4342
broadcom raid controller web interface

Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP strict-transport-security policy

9.8Critical
CVE-2023-4341
broadcom raid controller web interface

Broadcom RAID Controller is vulnerable to Privilege escalation to root due to creation of insecure folders by Web GUI

9.8Critical
CVE-2023-4340
broadcom raid controller web interface

Broadcom RAID Controller is vulnerable to Privilege escalation by taking advantage of the Session prints in the log file

7.5High
CVE-2023-4339
broadcom raid controller web interface

Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file permissions

9.8Critical
CVE-2023-4338
broadcom raid controller web interface

Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not provide X-Content-Type-Options Headers

6.5Medium
CVE-2023-4345
broadcom raid controller web interface

Broadcom RAID Controller web interface is vulnerable client-side control bypass leads to unauthorized data access for low privileged user