5.3
Moyenne
CVE-2023-29056 A valid LDAP user, under specific conditions, will default to read-only permissions when authenticating into XCC
Description
A valid LDAP user, under specific conditions, will default to read-only permissions when authenticating into XCC. To be vulnerable, XCC must be configured to use an LDAP server for Authentication/Authorization and have the login permission attribute not defined.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| XClarity Controller | Versions non publiées |
Autres CVE de XClarity Controller
Les 11 CVE de XClarity Controller →
CVE-2024-38512
A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated…
7.2
Élevée
CVE-2024-38511
A privilege escalation vulnerability was discovered in an upload processing functionality of XCC that could allow an…
7.2
Élevée
CVE-2024-38510
A privilege escalation vulnerability was discovered in the SSH captive command shell interface that could allow an…
7.2
Élevée
CVE-2024-38509
A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated…
7.2
Élevée