Skip to content
Sign in
5.3 Medium

CVE-2023-29056 A valid LDAP user, under specific conditions, will default to read-only permissions when authenticating into XCC

Description

A valid LDAP user, under specific conditions, will default to read-only permissions when authenticating into XCC. To be vulnerable, XCC must be configured to use an LDAP server for Authentication/Authorization and have the login permission attribute not defined.

Affected products and versions

Product Affected versions Fixed in
XClarity Controller Versions not published

Other CVEs of XClarity Controller

The 11 CVEs of XClarity Controller →
CVE-2024-38512 A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated… 7.2 High CVE-2024-38511 A privilege escalation vulnerability was discovered in an upload processing functionality of XCC that could allow an… 7.2 High CVE-2024-38510 A privilege escalation vulnerability was discovered in the SSH captive command shell interface that could allow an… 7.2 High CVE-2024-38509 A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated… 7.2 High
Track this CVE