Broadcom Lsi Storage Authority vulnerabilities

• broadcom raid controller web interface, lsi storage authority (lsa), lsi storage authority +2 more +4 more Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard SESSIONID cookie with SameSite attribute CVE-2023-4329 9.8 CriticalAugust 15, 2023
• broadcom raid controller web interface, lsi storage authority (lsa), lsi storage authority +1 more +3 more Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that supports obsolete SHA1-based ciphersuites CVE-2023-4326 7.5 HighAugust 15, 2023
• broadcom raid controller web interface, lsi storage authority (lsa), lsi storage authority +2 more +4 more Broadcom RAID Controller web interface is vulnerable due to usage of Libcurl with LSA has known vulnerabilities CVE-2023-4325 9.8 CriticalAugust 15, 2023
• broadcom raid controller web interface, lsi storage authority (lsa), lsi storage authority +2 more +4 more Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP Content-Security-Policy headers CVE-2023-4324 9.8 CriticalAugust 15, 2023
• broadcom lsi storage authority (lsa), lsi storage authority, raid controller web interface +2 more +4 more Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux CVE-2023-4335 7.5 HighAugust 15, 2023
• broadcom raid controller web interface, lsi storage authority (lsa), lsi storage authority +2 more +4 more Broadcom RAID Controller web interface is vulnerable due to Improper permissions on the log file CVE-2023-4332 7.5 HighAugust 15, 2023
• broadcom raid controller web interface, lsi storage authority (lsa), lsi storage authority +2 more +4 more Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocols CVE-2023-4331 7.5 HighAugust 15, 2023