4.9
Moyenne
CVE-2023-25495 A valid, authenticated administrative user can query a web interface API to reveal the configured LDAP client password…
Description
A valid, authenticated administrative user can query a web interface API to reveal the configured LDAP client password used by XCC to authenticate to an external LDAP server in certain configurations. There is no exposure where no LDAP client password is configured
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| XClarity Controller | Versions non publiées |
Autres CVE de XClarity Controller
Les 11 CVE de XClarity Controller →
CVE-2024-38512
A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated…
7.2
Élevée
CVE-2024-38511
A privilege escalation vulnerability was discovered in an upload processing functionality of XCC that could allow an…
7.2
Élevée
CVE-2024-38510
A privilege escalation vulnerability was discovered in the SSH captive command shell interface that could allow an…
7.2
Élevée
CVE-2024-38509
A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated…
7.2
Élevée