CVE-2023-4339: Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file permissions
Published Aug 15, 2023
·Updated
Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file permissions
Affected Software
1 affected component
Broadcom RAID Controller web interface=51.12.0-2779
Remediation
Information
This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.
Event History
Aug 15, 2023
CVE Published
via MITRE·06:25 PM
Data Sourced
via MITRE·06:25 PM
RemedyDescription
Data Sourced
via NVD·07:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of the Broadcom RAID Controller web interface vulnerability?
The vulnerability ID is CVE-2023-4339.
2
What is the title of the Broadcom RAID Controller web interface vulnerability?
The title of the vulnerability is 'Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored...'
3
What is the description of the Broadcom RAID Controller web interface vulnerability?
The vulnerability involves the exposure of private keys used for CIM stored with insecure file permissions on the Broadcom RAID Controller web interface.
4
What is the severity rating of the Broadcom RAID Controller web interface vulnerability?
The severity rating of the vulnerability is high with a value of 7.5.
5
How can I fix the Broadcom RAID Controller web interface vulnerability?
To fix the vulnerability, update the Broadcom RAID Controller web interface to a version that addresses the insecure file permission issue.