Description
A valid, authenticated user may be able to trigger a denial of service of the XCC web user interface or other undefined behavior through a format string injection vulnerability in a web interface API.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Lenovo | XClarity Controller | See product security advisory below | — |
Advisories 1
- WID-SEC-2023-0648 Lenovo XClarity: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 14, 2023