Broadcom RAID Controller Web UI Exposes Password via URL Query
CVE-2023-4343 Published on August 15, 2023
Broadcom RAID Controller web interface is vulnerable due to exposure of sensitive password information in the URL as a URL search parameter
Broadcom RAID Controller web interface is vulnerable due to exposure of sensitive password information in the URL as a URL search parameter
Products Associated with CVE-2023-4343
stack.watch emails you whenever new vulnerabilities are published in Broadcom Raid Controller Web Interface or Broadcom Lsi Storage Authority. Just hit a watch button to start following.
Affected Versions
Broadcom LSI Storage Authority (LSA):- Before 7.017.011.000 is affected.
- Before 7.017.011.000 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.