CVE-2023-4326: Broadcom LSI Storage Authority (LSA), слаба

Описание

Оригинално описание

Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that supports obsolete SHA1-based ciphersuites

Засегнати продукти

• Broadcom LSI Storage Authority (LSA): преди 7.017.011.000
• Intel RAID Web Console 3 (RWC3): 0
• broadcom lsi_storage_authority: преди 7.017.011.000; 0

Вид слабост

• CWE-327 Използване на компрометиран или рисков криптографски алгоритъм

История

Други уязвимости в Broadcom LSI Storage Authority (LSA)

• CVE-2023-4324
• CVE-2023-4329
• CVE-2023-4327
• CVE-2023-4328
• CVE-2023-4325

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2023-4326
• https://nvd.nist.gov/vuln/detail/CVE-2023-4326
• https://www.broadcom.com/support/resources/product-security-center
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00926.html