Skip to content
Sign in
6.4 Medium

CVE-2023-29058 A valid, authenticated XCC user with read-only permissions can modify custom user roles on other user accounts and the…

Description

A valid, authenticated XCC user with read-only permissions can modify custom user roles on other user accounts and the user trespass message through the XCC CLI. There is no exposure if SSH is disabled or if there are no users assigned optional read-only permissions.

Affected products and versions

Product Affected versions Fixed in
XClarity Controller Versions not published

Other CVEs of XClarity Controller

The 11 CVEs of XClarity Controller →
CVE-2024-38512 A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated… 7.2 High CVE-2024-38511 A privilege escalation vulnerability was discovered in an upload processing functionality of XCC that could allow an… 7.2 High CVE-2024-38510 A privilege escalation vulnerability was discovered in the SSH captive command shell interface that could allow an… 7.2 High CVE-2024-38509 A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated… 7.2 High
Track this CVE