CVE-2023-29057 (published 2023-04-28T20:53:13.267Z)
A valid XCC user's local account permissions overrides their active directory permissions under specific configurations. This could lead to a privilege escalation. To be vulnerable, LDAP must be configured for authentication/authorization and logins configured as “Local First, then LDAP”.
Affected products: Vendor: Lenovo
Product: XClarity Controller
Versions: Refer to Mitigation strategy section in LEN-118321