CVE-2023-4336: Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard cookies with Secure attribute
Published Aug 15, 2023
·Updated
Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard cookies with Secure attribute
Affected Software
1 affected component
Broadcom RAID Controller web interface=51.12.0-2779
Remediation
Information
This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.
Event History
Aug 15, 2023
CVE Published
via MITRE·06:25 PM
Data Sourced
via MITRE·06:25 PM
RemedyDescription
Data Sourced
via NVD·07:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2023-4336?
CVE-2023-4336 is a vulnerability in the Broadcom RAID Controller web interface that exposes cookies without the Secure attribute.
2
How severe is CVE-2023-4336?
CVE-2023-4336 has a severity rating of 9.8 out of 10, indicating a critical vulnerability.
3
What software is affected by CVE-2023-4336?
The Broadcom RAID Controller web interface version 51.12.0-2779 is affected by CVE-2023-4336.
4
How can I fix CVE-2023-4336?
To fix CVE-2023-4336, ensure that the Broadcom RAID Controller web interface is configured with a secure HTTP configuration that safeguards cookies with the Secure attribute.
5
Where can I find more information about CVE-2023-4336?
You can find more information about CVE-2023-4336 on the Broadcom Product Security Center website.