Beveiligingsadvies

CVE-2023-29057

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-04-28 20:53:13
Laatst bijgewerkt 2025-01-30 18:34:12
Toegewezen door lenovo
CVSS-score 7.3
Status PUBLISHED

Beschrijving

A valid XCC user's local account permissions overrides their active directory permissions under specific configurations. This could lead to a privilege escalation. To be vulnerable, LDAP must be configured for authentication/authorization and logins configured as “Local First, then LDAP”.