Skip to content
OpenAdvisories
Unscored CVE-2023-4336 EUVD-2023-54201GHSA-wjpw-jch2-7286

Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard cookies with Secure attribute

Published Aug 15, 2023 · Updated Nov 4, 2025 · Assigned by certcc

Vendor: Broadcom Vendor: Intel Product: LSI Storage Authority (LSA) Product: RAID Web Console 3 (RWC3)

Description

Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard cookies with Secure attribute

Affected products

VendorProductAffectedFixed
Broadcom LSI Storage Authority (LSA) < 7.017.011.000 7.017.011.000
Intel RAID Web Console 3 (RWC3) < 7.017.011.000 7.017.011.000

References