CVE-2023-4329: Broadcom LSI Storage Authority (LSA)

Описание

Оригинално описание

Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard SESSIONID cookie with SameSite attribute

Засегнати продукти

• Broadcom LSI Storage Authority (LSA): преди 7.017.011.000
• Intel RAID Web Console 3 (RWC3): преди 7.017.011.000
• broadcom lsi_storage_authority: преди 7.017.011.000
• intel raid_web_console_3: преди 7.017.011.000

История

Други уязвимости в Broadcom LSI Storage Authority (LSA)

• CVE-2023-4326
• CVE-2023-4324
• CVE-2023-4327
• CVE-2023-4328
• CVE-2023-4325

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2023-4329
• https://nvd.nist.gov/vuln/detail/CVE-2023-4329
• https://www.broadcom.com/support/resources/product-security-center
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00926.html