<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: intel-raid-web-console-3-rwc3</title><description>Every new CVE for intel-raid-web-console-3-rwc3.</description><link>https://agentprime.io/</link><item><title>CVE-2023-4324: Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP Content-Security-Policy headers</title><link>https://agentprime.io/advisories/CVE-2023-4324/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-4324/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Aug 2023 18:25:38 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-4325: Broadcom RAID Controller web interface is vulnerable due to usage of Libcurl with LSA has known vulnerabilities</title><link>https://agentprime.io/advisories/CVE-2023-4325/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-4325/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Aug 2023 18:25:38 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-4326: Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that supports obsolete SHA1-based ciphersuites</title><link>https://agentprime.io/advisories/CVE-2023-4326/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-4326/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Aug 2023 18:25:38 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-4329: Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard SESSIONID cookie with SameSite attribute</title><link>https://agentprime.io/advisories/CVE-2023-4329/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-4329/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Aug 2023 18:25:38 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-4331: Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocols</title><link>https://agentprime.io/advisories/CVE-2023-4331/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-4331/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Aug 2023 18:25:37 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-4332: Broadcom RAID Controller web interface is vulnerable due to Improper permissions on the log file</title><link>https://agentprime.io/advisories/CVE-2023-4332/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-4332/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Aug 2023 18:25:37 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-4334: Broadcom RAID Controller Web server (nginx) is serving private files without any authentication</title><link>https://agentprime.io/advisories/CVE-2023-4334/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-4334/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Aug 2023 18:25:37 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-4335: Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux</title><link>https://agentprime.io/advisories/CVE-2023-4335/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-4335/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Aug 2023 18:25:37 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-4336: Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard cookies with Secure attribute</title><link>https://agentprime.io/advisories/CVE-2023-4336/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-4336/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Aug 2023 18:25:36 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-4337: Broadcom RAID Controller web interface is vulnerable to improper session handling of managed servers on Gateway installation</title><link>https://agentprime.io/advisories/CVE-2023-4337/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-4337/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Aug 2023 18:25:36 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-4338: Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not provide X-Content-Type-Options Headers</title><link>https://agentprime.io/advisories/CVE-2023-4338/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-4338/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Aug 2023 18:25:36 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-4339: Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file permissions</title><link>https://agentprime.io/advisories/CVE-2023-4339/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-4339/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Aug 2023 18:25:35 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-4340: Broadcom RAID Controller is vulnerable to Privilege escalation by taking advantage of the Session prints in the log file</title><link>https://agentprime.io/advisories/CVE-2023-4340/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-4340/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Aug 2023 18:25:35 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-4341: Broadcom RAID Controller is vulnerable to Privilege escalation to root due to creation of insecure folders by Web GUI</title><link>https://agentprime.io/advisories/CVE-2023-4341/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-4341/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Aug 2023 18:25:34 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-4342: Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP strict-transport-security policy</title><link>https://agentprime.io/advisories/CVE-2023-4342/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-4342/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Aug 2023 18:25:34 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-4343: Broadcom RAID Controller web interface is vulnerable due to exposure of sensitive password information in the URL as a URL search parameter</title><link>https://agentprime.io/advisories/CVE-2023-4343/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-4343/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Aug 2023 18:25:34 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-4344: Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection</title><link>https://agentprime.io/advisories/CVE-2023-4344/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-4344/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Aug 2023 18:25:34 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2023-4323: Broadcom RAID Controller web interface is vulnerable to improper session management of active sessions on Gateway setup</title><link>https://agentprime.io/advisories/CVE-2023-4323/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-4323/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Aug 2023 18:21:36 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-4345: Broadcom RAID Controller web interface is vulnerable client-side control bypass</title><link>https://agentprime.io/advisories/CVE-2023-4345/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-4345/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Aug 2023 17:46:38 GMT</pubDate><category>CVE</category></item></channel></rss>