Security Advisory

CVE-2023-29057

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-04-28 20:53:13
Last updated 2025-01-30 18:34:12
Assigner lenovo
State PUBLISHED

Description

A valid XCC users local account permissions overrides their active directory permissions under specific configurations. This could lead to a privilege escalation. To be vulnerable, LDAP must be configured for authentication/authorization and logins configured as “Local First, then LDAP”.