CVE-2023-4329

Published: Aug 15, 2023

Modified: Nov 4, 2025

PUBLISHED

Description

Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard SESSIONID cookie with SameSite attribute

Vendor	Product	Versions
Broadcom	LSI Storage Authority (LSA)	affected `0 - < 7.017.011.000`
Intel	RAID Web Console 3 (RWC3)	affected `0 - < 7.017.011.000`

References

https://www.broadcom.com/support/resources/product-security-center

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2023-4329

Description

Affected Products

References