XC
Product
XClarity Controller
15
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 8Medium 7Low 0
Watch
Add XClarity Controller to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-29058 | 6.5 | Apr 28 | A valid, authenticated XCC user with read-only permissions can modify custom user roles on other user accounts and the user trespass message through the XCC CLI Affected: Refer to Mitigation strategy section in LEN-118321 |
| CVE-2019-6187 | 6.5 | Nov 20 | A stored CSV Injection vulnerability was reported in Lenovo XClarity Controller (XCC) that could allow an administrative or other appropriately permissioned user to store… Affected: before tei392m; before cdi340m; before g1i312; before psi328m |
| CVE-2023-29056 | 5.9 | Apr 28 | A valid LDAP user, under specific conditions, will default to read-only permissions when authenticating into XCC Affected: Refer to Mitigation strategy section in LEN-118321 |
| CVE-2021-3956 | 5.3 | May 18 | A read-only authentication bypass vulnerability was reported in the Third Quarter 2021 release of Lenovo XClarity Controller (XCC) firmware affecting XCC devices configured in… Affected: before 7.22_cdi382o; before 2.32_psi342n; before 3.41_tei382m; before 4.83_tei3c0n; before 1.51_tgbt24l |
| CVE-2023-25495 | 4.9 | Apr 28 | A valid, authenticated administrative user can query a web interface API to reveal the configured LDAP client password used by XCC to authenticate to an external LDAP server in… Affected: Refer to Mitigation strategy section in LEN-99936 |
| CVE-2021-3473 | 4.9 | Apr 13 | An internal product security audit of Lenovo XClarity Controller (XCC) discovered that the XCC configuration backup/restore password may be written to an internal XCC log buffer… Affected: 6.00_cdi370q; 1.10_tgbt12q; 2.14_psi338i; 4.40_tei3b2p |
| CVE-2019-6195 | 4.8 | Feb 14 | An authorization bypass exists in Lenovo XClarity Controller (XCC) versions prior to 3.08 CDI340V, 3.01 TEI392O, 1.71 PSI328N where a valid authenticated user with lesser… Affected: before 3.01_tei392o; before 3.08_cdi340v; before 1.71_psi328n |
Showing 7