CVE-2023-4607 (published 2023-10-24T20:25:30.100Z)
An authenticated XCC user can change permissions for any user through a crafted API command.
Affected products: Vendor: Lenovo
Product: Lenovo XClarity Controller (XCC)
Versions: various