No analysis available yet.
Vendor Solution
Customers should update to the version (or later) of Lenovo XClarity Controller (XCC) identified in the related Lenovo Product Security Advisory: https://support.lenovo.com/us/en/product_security/LEN-118321 https://support.lenovo.com/us/en/product_security/LEN-118321
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2023-32660 | A valid XCC user's local account permissions overrides their active directory permissions under specific configurations. This could lead to a privilege escalation. To be vulnerable, LDAP must be configured for authentication/authorization and logins configured as “Local First, then LDAP”. |
| Link | Providers |
|---|---|
| https://support.lenovo.com/us/en/product_security/LEN-118321 |
|
Thu, 30 Jan 2025 19:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Subscriptions
Status: PUBLISHED
Assigner: lenovo
Published:
Updated: 2025-01-30T18:34:12.946Z
Reserved: 2023-03-30T12:46:45.646Z
Link: CVE-2023-29057
Updated: 2024-08-02T14:00:15.127Z
Status : Modified
Published: 2023-04-28T21:15:08.673
Modified: 2024-11-21T07:56:28.157
Link: CVE-2023-29057
No data.
OpenCVE Enrichment
No data.
EUVD