Skip to content
Sign in
7.3 High

CVE-2023-29057 A valid XCC user's local account permissions overrides their active directory permissions under specific configurations

Description

A valid XCC user's local account permissions overrides their active directory permissions under specific configurations. This could lead to a privilege escalation. To be vulnerable, LDAP must be configured for authentication/authorization and logins configured as “Local First, then LDAP”.

Affected products and versions

Product Affected versions Fixed in
XClarity Controller Versions not published

Other CVEs of XClarity Controller

The 11 CVEs of XClarity Controller →
CVE-2024-38512 A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated… 7.2 High CVE-2024-38511 A privilege escalation vulnerability was discovered in an upload processing functionality of XCC that could allow an… 7.2 High CVE-2024-38510 A privilege escalation vulnerability was discovered in the SSH captive command shell interface that could allow an… 7.2 High CVE-2024-38509 A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated… 7.2 High
Track this CVE