← CVE Intelligence

CVE-2023-29056

Lenovo / XClarity Controller PUBLISHED

Description (CNA)

A valid LDAP user, under specific conditions, will default to read-only permissions when authenticating into XCC. To be vulnerable, XCC must be configured to use an LDAP server for Authentication/Authorization and have the login permission attribute not defined.

Affected (CNA)

Vendor / productVersions
Lenovo / XClarity Controlleraffected Refer to Mitigation strategy section in LEN-118321

CWE

CWE-269

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.