CVE-2023-0683 (published 2023-05-01T14:23:12.987Z)
A valid, authenticated XCC user with read only access may gain elevated privileges through a specifically crafted API call.
Affected products: Vendor: Lenovo
Product: XClarity Controller
Versions: See product security advisory below