Skip to content
OpenAdvisories
Unscored CVE-2023-4335 EUVD-2023-54200GHSA-74hw-mjgm-cvv4

Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux

Published Aug 15, 2023 · Updated Oct 8, 2024 · Assigned by certcc

Vendor: Broadcom Vendor: Intel Product: LSI Storage Authority (LSA) Product: RAID Web Console 3 (RWC3)

Description

Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux

Affected products

VendorProductAffectedFixed
Broadcom LSI Storage Authority (LSA) < 7.017.011.000 7.017.011.000
Intel RAID Web Console 3 (RWC3) < 7.017.011.000 7.017.011.000

References