Detections
Analytics
CVE-2023-29057
high
Description
A valid XCC user's local account permissions overrides their active directory permissions under specific configurations. This could lead to a privilege escalation. To be vulnerable, LDAP must be configured for authentication/authorization and logins configured as “Local First, then LDAP”.
References
https://support.lenovo.com/us/en/product_security/LEN-118321