Broadcom RAID Controller Web server (nginx) is serving private files without any authentication

CVE-2023-4334

Summary

The Broadcom RAID Controller Web server, powered by nginx, is susceptible to an authentication bypass vulnerability that allows unauthorized access to private files. This exploit exposes sensitive data, as the web server fails to enforce proper authentication mechanisms, potentially leading to data leaks or other security incidents. Users are urged to assess their affected systems and apply available patches to mitigate risks.

References