CVE-2023-4343: Broadcom RAID Controller web interface is vulnerable due to exposure of sensitive password information in the URL as a URL search parameter

Published Aug 15, 2023

Updated

Broadcom RAID Controller web interface is vulnerable due to exposure of sensitive password information in the URL as a URL search parameter

Affected Software

1 affected component

Broadcom RAID Controller web interface=51.12.0-2779

Remediation

Information

This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.

Event History

Aug 15, 2023

CVE Published

via MITRE·06:25 PM

Data Sourced

via MITRE·06:25 PM

RemedyDescription

Data Sourced

via NVD·07:15 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is CVE-2023-4343?

CVE-2023-4343 is a vulnerability in the Broadcom RAID Controller web interface that exposes sensitive password information in the URL as a URL search parameter.

What is the severity of CVE-2023-4343?

CVE-2023-4343 has a severity rating of 7.5, which is considered high.

What software is affected by CVE-2023-4343?

The Broadcom RAID Controller web interface version 51.12.0-2779 is affected by CVE-2023-4343.

How can I fix CVE-2023-4343?

To fix CVE-2023-4343, it is recommended to update the Broadcom RAID Controller web interface to a secure version provided by Broadcom.

Where can I find more information about CVE-2023-4343?

More information about CVE-2023-4343 can be found on the Broadcom Product Security Center website at https://www.broadcom.com/support/resources/product-security-center.