CVE-2023-29056

A valid LDAP user, under specific conditions, will default to read-only permissions when authenticating into XCC. To be vulnerable, XCC must be configured to use an LDAP server for Authentication/Authorization and have the login permission attribute not defined.

Score
CVSS 3.1 5.9 Medium
Status
Modified - psirt@lenovo.com
Published
2023-04-28
Last modified
2025-01-30
Weaknesses
CWE-269

Affected products

References

 
 
© AVABIS GmbH privacypolicy about