ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2023-29056

—
CVSS 3.1
5.9 medium
EPSS
<1%p38
Published
()
Modified
Description

A valid LDAP user, under specific conditions, will default to read-only permissions when authenticating into XCC. To be vulnerable, XCC must be configured to use an LDAP server for Authentication/Authorization and have the login permission attribute not defined.

Vendors
lenovo
Products
thinkagile hx5530 firmware, thinkagile hx7530 firmware, thinkagile vx3331 firmware, thinkagile hx enclosure firmware, thinkagile hx1021 firmware, thinkagile hx1320 firmware, thinkagile hx1321 firmware, thinkagile hx1331 firmware, thinkagile hx1520-r firmware, thinkagile hx1521-r firmware, thinkagile hx2320-e firmware, thinkagile hx2321 firmware
Weakness
CWE-269
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news

No ingested article mentions this CVE yet.