6.4
Moyenne
CVE-2023-29058 A valid, authenticated XCC user with read-only permissions can modify custom user roles on other user accounts and the…
Description
A valid, authenticated XCC user with read-only permissions can modify custom user roles on other user accounts and the user trespass message through the XCC CLI. There is no exposure if SSH is disabled or if there are no users assigned optional read-only permissions.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| XClarity Controller | Versions non publiées |
Autres CVE de XClarity Controller
Les 11 CVE de XClarity Controller →
CVE-2024-38512
A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated…
7.2
Élevée
CVE-2024-38511
A privilege escalation vulnerability was discovered in an upload processing functionality of XCC that could allow an…
7.2
Élevée
CVE-2024-38510
A privilege escalation vulnerability was discovered in the SSH captive command shell interface that could allow an…
7.2
Élevée
CVE-2024-38509
A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated…
7.2
Élevée