# Broadcom LSI Storage Authority (LSA). Every CVE that names Broadcom LSI Storage Authority (LSA) among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP Content-Security-Policy headers](https://agentprime.io/advisories/CVE-2023-4324.md) `CVE-2023-4324` · CVE record: Broadcom LSI Storage Authority (LSA) and 1 more · No CVSS score · Not analysed yet · Published 15 Aug 2023 - [Broadcom RAID Controller web interface is vulnerable due to usage of Libcurl with LSA has known vulnerabilities](https://agentprime.io/advisories/CVE-2023-4325.md) `CVE-2023-4325` · CVE record: Broadcom LSI Storage Authority (LSA) and 1 more · No CVSS score · Not analysed yet · Published 15 Aug 2023 - [Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that supports obsolete SHA1-based ciphersuites](https://agentprime.io/advisories/CVE-2023-4326.md) `CVE-2023-4326` · CVE record: Broadcom LSI Storage Authority (LSA) and 1 more · No CVSS score · Not analysed yet · Published 15 Aug 2023 · Tags: Weak cryptography or TLS - [Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user on Linux](https://agentprime.io/advisories/CVE-2023-4327.md) `CVE-2023-4327` · CVE record: Broadcom LSI Storage Authority (LSA) · No CVSS score · Not analysed yet · Published 15 Aug 2023 · Tags: Hard-coded credentials - [Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user on Linux](https://agentprime.io/advisories/CVE-2023-4328.md) `CVE-2023-4328` · CVE record: Broadcom LSI Storage Authority (LSA) · No CVSS score · Not analysed yet · Published 15 Aug 2023 · Tags: Hard-coded credentials - [Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard SESSIONID cookie with SameSite attribute](https://agentprime.io/advisories/CVE-2023-4329.md) `CVE-2023-4329` · CVE record: Broadcom LSI Storage Authority (LSA) and 1 more · No CVSS score · Not analysed yet · Published 15 Aug 2023 - [Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocols](https://agentprime.io/advisories/CVE-2023-4331.md) `CVE-2023-4331` · CVE record: Broadcom LSI Storage Authority (LSA) and 1 more · No CVSS score · Not analysed yet · Published 15 Aug 2023 · Tags: Weak cryptography or TLS - [Broadcom RAID Controller web interface is vulnerable due to Improper permissions on the log file](https://agentprime.io/advisories/CVE-2023-4332.md) `CVE-2023-4332` · CVE record: Broadcom LSI Storage Authority (LSA) and 1 more · No CVSS score · Not analysed yet · Published 15 Aug 2023 · Tags: Broken access control - [Broadcom RAID Controller web interface doesn’t enforce SSL cipher ordering by server](https://agentprime.io/advisories/CVE-2023-4333.md) `CVE-2023-4333` · CVE record: Broadcom LSI Storage Authority (LSA) · No CVSS score · Not analysed yet · Published 15 Aug 2023 · Tags: Weak cryptography or TLS - [Broadcom RAID Controller Web server (nginx) is serving private files without any authentication](https://agentprime.io/advisories/CVE-2023-4334.md) `CVE-2023-4334` · CVE record: Broadcom LSI Storage Authority (LSA) and 1 more · No CVSS score · Not analysed yet · Published 15 Aug 2023 - [Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux](https://agentprime.io/advisories/CVE-2023-4335.md) `CVE-2023-4335` · CVE record: Broadcom LSI Storage Authority (LSA) and 1 more · No CVSS score · Not analysed yet · Published 15 Aug 2023 - [Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard cookies with Secure attribute](https://agentprime.io/advisories/CVE-2023-4336.md) `CVE-2023-4336` · CVE record: Broadcom LSI Storage Authority (LSA) and 1 more · No CVSS score · Not analysed yet · Published 15 Aug 2023 - [Broadcom RAID Controller web interface is vulnerable to improper session handling of managed servers on Gateway installation](https://agentprime.io/advisories/CVE-2023-4337.md) `CVE-2023-4337` · CVE record: Broadcom LSI Storage Authority (LSA) and 1 more · No CVSS score · Not analysed yet · Published 15 Aug 2023 - [Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not provide X-Content-Type-Options Headers](https://agentprime.io/advisories/CVE-2023-4338.md) `CVE-2023-4338` · CVE record: Broadcom LSI Storage Authority (LSA) and 1 more · No CVSS score · Not analysed yet · Published 15 Aug 2023 - [Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file permissions](https://agentprime.io/advisories/CVE-2023-4339.md) `CVE-2023-4339` · CVE record: Broadcom LSI Storage Authority (LSA) and 1 more · No CVSS score · Not analysed yet · Published 15 Aug 2023 - [Broadcom RAID Controller is vulnerable to Privilege escalation by taking advantage of the Session prints in the log file](https://agentprime.io/advisories/CVE-2023-4340.md) `CVE-2023-4340` · CVE record: Broadcom LSI Storage Authority (LSA) and 1 more · No CVSS score · Not analysed yet · Published 15 Aug 2023 - [Broadcom RAID Controller is vulnerable to Privilege escalation to root due to creation of insecure folders by Web GUI](https://agentprime.io/advisories/CVE-2023-4341.md) `CVE-2023-4341` · CVE record: Broadcom LSI Storage Authority (LSA) and 1 more · No CVSS score · Not analysed yet · Published 15 Aug 2023 - [Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP strict-transport-security policy](https://agentprime.io/advisories/CVE-2023-4342.md) `CVE-2023-4342` · CVE record: Broadcom LSI Storage Authority (LSA) and 1 more · No CVSS score · Not analysed yet · Published 15 Aug 2023 - [Broadcom RAID Controller web interface is vulnerable due to exposure of sensitive password information in the URL as a URL search parameter](https://agentprime.io/advisories/CVE-2023-4343.md) `CVE-2023-4343` · CVE record: Broadcom LSI Storage Authority (LSA) and 1 more · No CVSS score · Not analysed yet · Published 15 Aug 2023 - [Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection](https://agentprime.io/advisories/CVE-2023-4344.md) `CVE-2023-4344` · CVE record: Broadcom LSI Storage Authority (LSA) and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Aug 2023 · Tags: CWE-331 - [Broadcom RAID Controller web interface is vulnerable to improper session management of active sessions on Gateway setup](https://agentprime.io/advisories/CVE-2023-4323.md) `CVE-2023-4323` · CVE record: Broadcom LSI Storage Authority (LSA) and 1 more · No CVSS score · Not analysed yet · Published 15 Aug 2023 - [Broadcom RAID Controller web interface is vulnerable client-side control bypass](https://agentprime.io/advisories/CVE-2023-4345.md) `CVE-2023-4345` · CVE record: Broadcom LSI Storage Authority (LSA) and 1 more · No CVSS score · Not analysed yet · Published 15 Aug 2023 ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .