The Remote Mount feature can potentially be abused by valid, authenticated users to make connections to internal services that may not normally be accessible to users. Internal service access controls, as applicable, remain in effect.
Advisories
Source ID Title
EUVD EUVD EUVD-2022-37792 The Remote Mount feature can potentially be abused by valid, authenticated users to make connections to internal services that may not normally be accessible to users. Internal service access controls, as applicable, remain in effect.
Fixes

Solution

Update to the Lenovo XClarity Controller (XCC) version (or higher) as recommended in the Product Impact section in LEN-87734.


Workaround

No workaround given by the vendor.

History

Thu, 27 Mar 2025 19:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: lenovo

Published:

Updated: 2025-03-27T18:51:27.992Z

Reserved: 2022-06-30T19:42:17.792Z

Link: CVE-2022-34888

cve-icon Vulnrichment

Updated: 2024-08-03T09:22:10.892Z

cve-icon NVD

Status : Modified

Published: 2023-01-30T22:15:11.960

Modified: 2024-11-21T07:10:22.770

Link: CVE-2022-34888

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.