CVE-2023-29057

Publication date

2023-04-28 20:53:13

Family

lenovo

State

PUBLISHED

Description

A valid XCC users local account permissions overrides their active directory permissions under specific configurations. This could lead to a privilege escalation. To be vulnerable, LDAP must be configured for authentication/authorization and logins configured as “Local First, then LDAP”.