CVE-2023-4327

Summary

Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user on Linux

Affected Software

Weaknesses

• CWE-522: CWE-522 Insufficiently Protected Credentials

ADP Enrichment

CVE Program Container

Additional References

• https://www.broadcom.com/support/resources/product-security-center
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00926.html

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://www.broadcom.com/support/resources/product-security-center

• ←Previous
• Next→