Description (CNA)
Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard SESSIONID cookie with SameSite attribute
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Broadcom / LSI Storage Authority (LSA) | affected 0 before 7.017.011.000 |
| Intel / RAID Web Console 3 (RWC3) | affected 0 before 7.017.011.000 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.