title: Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP strict-transport-security  policy
description: Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP strict-transport-security  policy
affected:
{
defaultStatus: affected
product: LSI Storage Authority (LSA)
vendor: Broadcom
versions:
lessThan: 7.017.011.000, status: affected, version: 0, versionType: custom
}
{
defaultStatus: unaffected
product: RAID Web Console 3 (RWC3)
vendor: Intel
versions:
lessThan: 7.017.011.000, status: affected, version: 0, versionType: custom
}
solutions: This issue is fixed in 7.017.011.000. For more information please contact your Broadcom representative.