Description
A valid, authenticated XCC user with read only access may gain elevated privileges through a specifically crafted API call.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Lenovo | XClarity Controller | See product security advisory below | — |
Advisories 1
- WID-SEC-2023-0648 Lenovo XClarity: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 14, 2023