Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux
Fixes

Solution

This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.


Workaround

No workaround given by the vendor.

History

Tue, 08 Oct 2024 20:15:00 +0000

Type Values Removed Values Added
First Time appeared Broadcom lsi Storage Authority
Intel
Intel raid Web Console 3
CPEs cpe:2.3:a:broadcom:lsi_storage_authority:*:*:*:*:*:*:*:*
cpe:2.3:a:intel:raid_web_console_3:-:*:*:*:*:windows:*:*
Vendors & Products Broadcom lsi Storage Authority
Intel
Intel raid Web Console 3
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: certcc

Published:

Updated: 2024-10-08T19:37:21.254Z

Reserved: 2023-08-14T21:25:58.771Z

Link: CVE-2023-4335

cve-icon Vulnrichment

Updated: 2024-08-02T07:24:04.459Z

cve-icon NVD

Status : Modified

Published: 2023-08-15T19:15:11.450

Modified: 2024-11-21T08:34:52.697

Link: CVE-2023-4335

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.