PT-2023-28805

CVE-2023-4336

·

Published

2023-08-15

·

Updated

2023-08-21

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Broadcom RAID Controller (affected versions not specified)
Description The Broadcom RAID Controller web interface is vulnerable due to an insecure default HTTP configuration that does not safeguard cookies with the Secure attribute.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Researchers
Vendors
Affected products
Related identifiers
CVE-2023-4336
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com