CVE-2023-4329

Summary

CVE-2023-4329 refers to a vulnerability in Broadcom RAID Controller's web interface. The issue arises due to an insecure default HTTP configuration, which fails to safeguard the SESSIONID cookie without the SameSite attribute. This oversight exposes the cookie to potential cross-site request forgery (CSRF) attacks, allowing unauthorized modifications to user sessions. Attackers can exploit this vulnerability by manipulating vulnerable applications through malicious websites. Users are advised to update their RAID controllers with the latest patches to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.