Skip to content
Sign in
4.9 Medium

CVE-2023-25495 A valid, authenticated administrative user can query a web interface API to reveal the configured LDAP client password…

Description

A valid, authenticated administrative user can query a web interface API to reveal the configured LDAP client password used by XCC to authenticate to an external LDAP server in certain configurations. There is no exposure where no LDAP client password is configured

Affected products and versions

Product Affected versions Fixed in
XClarity Controller Versions not published

Other CVEs of XClarity Controller

The 11 CVEs of XClarity Controller →
CVE-2024-38512 A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated… 7.2 High CVE-2024-38511 A privilege escalation vulnerability was discovered in an upload processing functionality of XCC that could allow an… 7.2 High CVE-2024-38510 A privilege escalation vulnerability was discovered in the SSH captive command shell interface that could allow an… 7.2 High CVE-2024-38509 A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated… 7.2 High
Track this CVE