Skip to content
OpenAdvisories
Unscored CVE-2023-4329 EUVD-2023-54194GHSA-mmq9-xhf4-7wp2

Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard SESSIONID cookie with SameSite attribute

Published Aug 15, 2023 · Updated Nov 4, 2025 · Assigned by certcc

Vendor: Broadcom Vendor: Intel Product: LSI Storage Authority (LSA) Product: RAID Web Console 3 (RWC3)

Description

Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard SESSIONID cookie with SameSite attribute

Affected products

VendorProductAffectedFixed
Broadcom LSI Storage Authority (LSA) < 7.017.011.000 7.017.011.000
Intel RAID Web Console 3 (RWC3) < 7.017.011.000 7.017.011.000

References