CVE-2023-29056 (published 2023-04-28T21:07:40.439Z)
A valid LDAP user, under specific conditions, will default to read-only permissions when authenticating into XCC. To be vulnerable, XCC must be configured to use an LDAP server for Authentication/Authorization and have the login permission attribute not defined.
Affected products: Vendor: Lenovo
Product: XClarity Controller
Versions: Refer to Mitigation strategy section in LEN-118321