Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-25495

A valid, authenticated administrative user can query a web interface API to reveal the configured LDAP client password used by XCC to authenticate to an external LDAP server in certain configurations. There is no exposure where no LDAP client password is configured

Published

2023-04-28T22:15:08.950

Last Modified

2024-11-21T07:49:37.177

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.9 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-522
  • Type: Primary
    CWE-522
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System lenovo thinkagile_hx5530_firmware < 2.93_afbt30p Yes
Hardware lenovo thinkagile_hx5530 - No
Operating System lenovo thinkagile_hx7530_firmware < 2.93_afbt30p Yes
Hardware lenovo thinkagile_hx7530 - No
Operating System lenovo thinkagile_vx3331_firmware < 2.93_afbt30p Yes
Hardware lenovo thinkagile_vx3331 - No
Operating System lenovo thinkagile_hx_enclosure_firmware < 3.72_tei388s Yes
Hardware lenovo thinkagile_hx_enclosure - No
Operating System lenovo thinkagile_hx1021_firmware < 3.72_tei388s Yes
Hardware lenovo thinkagile_hx1021 - No
Operating System lenovo thinkagile_hx1320_firmware < 8.88_cdi3a4a Yes
Hardware lenovo thinkagile_hx1320 - No
Operating System lenovo thinkagile_hx1321_firmware < 8.88_cdi3a4a Yes
Hardware lenovo thinkagile_hx1321 - No
Operating System lenovo thinkagile_hx1331_firmware < 2.93_afbt30p Yes
Hardware lenovo thinkagile_hx1331 - No
Operating System lenovo thinkagile_hx1520-r_firmware < 8.88_cdi3a4a Yes
Hardware lenovo thinkagile_hx1520-r - No
Operating System lenovo thinkagile_hx1521-r_firmware < 8.88_cdi3a4a Yes
Hardware lenovo thinkagile_hx1521-r - No
Operating System lenovo thinkagile_hx2320-e_firmware < 8.88_cdi3a4a Yes
Hardware lenovo thinkagile_hx2320-e - No
Operating System lenovo thinkagile_hx2321_firmware < 8.88_cdi3a4a Yes
Hardware lenovo thinkagile_hx2321 - No
Operating System lenovo thinkagile_hx2330_firmware < 2.93_afbt30p Yes
Operating System lenovo thinkagile_hx2330_firmware 2.93_afbt30p Yes
Hardware lenovo thinkagile_hx2330 - No
Operating System lenovo thinkagile_hx2331_firmware < 2.93_afbt30p Yes
Hardware lenovo thinkagile_hx2331 - No
Operating System lenovo thinkagile_hx2720-e_firmware < 3.72_tei388s Yes
Hardware lenovo thinkagile_hx2720-e - No
Operating System lenovo thinkagile_hx3320_firmware < 8.88_cdi3a4a Yes
Hardware lenovo thinkagile_hx3320 - No
Operating System lenovo thinkagile_hx3321_firmware < 8.88_cdi3a4a Yes
Hardware lenovo thinkagile_hx3321 - No
Operating System lenovo thinkagile_hx3330_firmware < 2.93_afbt30p Yes
Hardware lenovo thinkagile_hx3330 - No
Operating System lenovo thinkagile_hx3331_firmware < 2.93_afbt30p Yes
Hardware lenovo thinkagile_hx3331 - No
Operating System lenovo thinkagile_hx3331_firmware < 4.71_d8bt48p Yes
Hardware lenovo thinkagile_hx3331 - No
Operating System lenovo thinkagile_hx3375_firmware < 4.71_d8bt48p Yes
Hardware lenovo thinkagile_hx3375 - No
Operating System lenovo thinkagile_hx3376_firmware < 8.88_cdi3a4a Yes
Hardware lenovo thinkagile_hx3376 - No
Operating System lenovo thinkagile_hx3520-g_firmware < 8.88_cdi3a4a Yes
Hardware lenovo thinkagile_hx3520-g - No
Operating System lenovo thinkagile_hx3521-g_firmware < 3.72_tei388s Yes
Hardware lenovo thinkagile_hx3521-g - No
Operating System lenovo thinkagile_hx3720_firmware < 3.72_tei388s Yes
Hardware lenovo thinkagile_hx3720 - No
Operating System lenovo thinkagile_hx3721_firmware < 8.88_cdi3a4a Yes
Hardware lenovo thinkagile_hx3721 - No
Operating System lenovo thinkagile_hx5520_firmware < 8.88_cdi3a4a Yes
Hardware lenovo thinkagile_hx5520 - No
Operating System lenovo thinkagile_hx5520-c_firmware < 8.88_cdi3a4a Yes
Hardware lenovo thinkagile_hx5520-c - No
Operating System lenovo thinkagile_hx5521_firmware < 8.88_cdi3a4a Yes
Hardware lenovo thinkagile_hx5521 - No
Operating System lenovo thinkagile_hx5521-c_firmware < 2.93_afbt30p Yes
Hardware lenovo thinkagile_hx5521-c - No
Operating System lenovo thinkagile_hx5531_firmware < 8.88_cdi3a4a Yes
Hardware lenovo thinkagile_hx5531 - No
Operating System lenovo thinkagile_hx7520_firmware < 8.88_cdi3a4a Yes
Hardware lenovo thinkagile_hx7520 - No
Operating System lenovo thinkagile_hx7521_firmware < 2.93_afbt30p Yes
Hardware lenovo thinkagile_hx7521 - No
Operating System lenovo thinkagile_hx7530_firmware < 2.93_afbt30p Yes
Hardware lenovo thinkagile_hx7530 - No
Operating System lenovo thinkagile_hx7531_firmware < 2.93_afbt30p Yes
Hardware lenovo thinkagile_hx7531 - No
Operating System lenovo thinkagile_hx7531_firmware < 2.75_psi348s Yes
Hardware lenovo thinkagile_hx7531 - No
Operating System lenovo thinkagile_hx7820_firmware < 2.75_psi348s Yes
Hardware lenovo thinkagile_hx7820 - No
Operating System lenovo thinkagile_hx7821_firmware < 3.72_tei388s Yes
Hardware lenovo thinkagile_hx7821 - No
Operating System lenovo thinkagile_mx1020_firmware < 2.93_afbt30p Yes
Hardware lenovo thinkagile_mx1020 - No
Operating System lenovo thinkagile_mx3330-f_firmware < 2.93_afbt30p Yes
Hardware lenovo thinkagile_mx3330-f - No
Operating System lenovo thinkagile_mx3330-h_firmware < 2.93_afbt30p Yes
Hardware lenovo thinkagile_mx3330-h - No
Operating System lenovo thinkagile_mx3331-f_firmware < 2.93_afbt30p Yes
Hardware lenovo thinkagile_mx3331-f - No
Operating System lenovo thinkagile_mx3331-h_firmware < 2.93_afbt30p Yes
Hardware lenovo thinkagile_mx3331-h - No
Operating System lenovo thinkagile_mx3530_f_firmware < 2.93_afbt30p Yes
Hardware lenovo thinkagile_mx3530_f - No
Operating System lenovo thinkagile_mx3530-h_firmware < 2.93_afbt30p Yes
Hardware lenovo thinkagile_mx3530-h - No
Operating System lenovo thinkagile_mx3531_h_firmware < 2.93_afbt30p Yes
Hardware lenovo thinkagile_mx3531_h - No
Operating System lenovo thinkagile_mx3531-f_firmware < 3.72_tei388s Yes
Hardware lenovo thinkagile_mx3531-f - No
Operating System lenovo thinkagile_mx1021_on_se350_firmware < 3.72_tei388s Yes
Hardware lenovo thinkagile_mx1021_on_se350 - No
Operating System lenovo thinkagile_vx_1se_firmware < 3.72_tei388s Yes
Hardware lenovo thinkagile_vx_1se - No
Operating System lenovo thinkagile_vx_2u4n_firmware < 3.72_tei388s Yes
Hardware lenovo thinkagile_vx_2u4n - No
Operating System lenovo thinkagile_vx_4u_firmware < 2.75_psi348s Yes
Hardware lenovo thinkagile_vx_4u - No
Operating System lenovo thinkagile_vx1320_firmware < 3.72_tei388s Yes
Hardware lenovo thinkagile_vx1320 - No
Operating System lenovo thinkagile_vx2320_firmware < 8.88_cdi3a4a Yes
Hardware lenovo thinkagile_vx2320 - No
Operating System lenovo thinkagile_vx2330_firmware < 2.93_afbt30p Yes
Hardware lenovo thinkagile_vx2330 - No
Operating System lenovo thinkagile_vx3320_firmware < 8.88_cdi3a4a Yes
Hardware lenovo thinkagile_vx3320 - No
Operating System lenovo thinkagile_vx3330_firmware < 2.93_afbt30p Yes
Hardware lenovo thinkagile_vx3330 - No
Operating System lenovo thinkagile_vx3520-g_firmware < 8.88_cdi3a4a Yes
Hardware lenovo thinkagile_vx3520-g - No
Operating System lenovo thinkagile_vx3530-g_firmware < 2.93_afbt30p Yes
Hardware lenovo thinkagile_vx3530-g - No
Operating System lenovo thinkagile_vx3720_firmware < 3.72_tei388s Yes
Hardware lenovo thinkagile_vx3720 - No
Operating System lenovo thinkagile_vx5520_firmware < 8.88_cdi3a4a Yes
Hardware lenovo thinkagile_vx5520 - No
Operating System lenovo thinkagile_vx5530_firmware < 2.93_afbt30p Yes
Hardware lenovo thinkagile_vx5530 - No
Operating System lenovo thinkagile_vx7320_n_firmware < 8.88_cdi3a4a Yes
Hardware lenovo thinkagile_vx7320_n - No
Operating System lenovo thinkagile_vx7330_firmware < 2.93_afbt30p Yes
Hardware lenovo thinkagile_vx7330 - No
Operating System lenovo thinkagile_vx7520_firmware < 8.88_cdi3a4a Yes
Hardware lenovo thinkagile_vx7520 - No
Operating System lenovo thinkagile_vx7520_n_firmware < 8.88_cdi3a4a Yes
Hardware lenovo thinkagile_vx7520_n - No
Operating System lenovo thinkagile_vx7530_firmware < 2.93_afbt30p Yes
Hardware lenovo thinkagile_vx7530 - No
Operating System lenovo thinkagile_vx7531_firmware < 2.93_afbt30p Yes
Hardware lenovo thinkagile_vx7531 - No
Operating System lenovo thinkagile_vx7820_firmware < 2.75_psi348s Yes
Hardware lenovo thinkagile_vx7820 - No
Operating System lenovo thinkedge_se450__firmware < 1.60_usx324o Yes
Hardware lenovo thinkedge_se450_ - No
Operating System lenovo thinkstation_p920_firmware < 8.88_cdi3a4a Yes
Hardware lenovo thinkstation_p920 - No
Operating System lenovo thinksystem_sd530_firmware < 3.72_tei388s Yes
Hardware lenovo thinksystem_sd530 - No
Operating System lenovo thinksystem_sd630_v2_firmware < 2.60_tgbt42h Yes
Hardware lenovo thinksystem_sd630_v2 - No
Operating System lenovo thinksystem_sd650_firmware < 3.72_tei388s Yes
Hardware lenovo thinksystem_sd650 - No
Operating System lenovo thinksystem_sd650_v2_firmware < 2.60_tgbt42h Yes
Hardware lenovo thinksystem_sd650_v2 - No
Operating System lenovo thinksystem_sd650-n_v2_firmware < 2.60_tgbt42h Yes
Hardware lenovo thinksystem_sd650-n_v2 - No
Operating System lenovo thinksystem_se350_firmware < 3.72_tei388s Yes
Hardware lenovo thinksystem_se350 - No
Operating System lenovo thinksystem_sn550_firmware < 3.72_tei388s Yes
Hardware lenovo thinksystem_sn550 - No
Operating System lenovo thinksystem_sn550_v2_firmware < 2.60_tgbt42h Yes
Hardware lenovo thinksystem_sn550_v2 - No
Operating System lenovo thinksystem_sn850_firmware < 3.72_tei388s Yes
Hardware lenovo thinksystem_sn850 - No
Operating System lenovo thinksystem_sr150_firmware < 3.72_tei388s Yes
Hardware lenovo thinksystem_sr150 - No
Operating System lenovo thinksystem_sr158_firmware < 3.72_tei388s Yes
Hardware lenovo thinksystem_sr158 - No
Operating System lenovo thinksystem_sr250_firmware < 3.72_tei388s Yes
Hardware lenovo thinksystem_sr250 - No
Operating System lenovo thinksystem_sr250_v2_firmware < 2.60_tgbt42h Yes
Hardware lenovo thinksystem_sr250_v2 - No
Operating System lenovo thinksystem_sr258_firmware < 3.72_tei388s Yes
Hardware lenovo thinksystem_sr258 - No
Operating System lenovo thinksystem_sr258_v2_firmware < 2.60_tgbt42h Yes
Hardware lenovo thinksystem_sr258_v2 - No
Operating System lenovo thinksystem_sr530_firmware < 8.88_cdi3a4a Yes
Hardware lenovo thinksystem_sr530 - No
Operating System lenovo thinksystem_sr550_firmware < 8.88_cdi3a4a Yes
Hardware lenovo thinksystem_sr550 - No
Operating System lenovo thinksystem_sr570_firmware < 8.88_cdi3a4a Yes
Hardware lenovo thinksystem_sr570 - No
Operating System lenovo thinksystem_sr590_firmware < 8.88_cdi3a4a Yes
Hardware lenovo thinksystem_sr590 - No
Operating System lenovo thinksystem_sr630_firmware < 8.88_cdi3a4a Yes
Hardware lenovo thinksystem_sr630 - No
Operating System lenovo thinksystem_sr630_v2_firmware < 2.93_afbt30p Yes
Hardware lenovo thinksystem_sr630_v2 - No
Operating System lenovo thinksystem_sr645_firmware < 4.71_d8bt48p Yes
Hardware lenovo thinksystem_sr645 - No
Operating System lenovo thinksystem_sr645_v3_firmware < 4.71_d8bt48p Yes
Hardware lenovo thinksystem_sr645_v3 - No
Operating System lenovo thinksystem_sr650_firmware < 8.88_cdi3a4a Yes
Hardware lenovo thinksystem_sr650 - No
Operating System lenovo thinksystem_sr650_v2_firmware < 2.93_afbt30p Yes
Hardware lenovo thinksystem_sr650_v2 - No
Operating System lenovo thinksystem_sr665_firmware < 4.71_d8bt48p Yes
Hardware lenovo thinksystem_sr665 - No
Operating System lenovo thinksystem_sr665_v3_firmware < 4.71_d8bt48p Yes
Hardware lenovo thinksystem_sr665_v3 - No
Operating System lenovo thinksystem_sr670_firmware < 3.72_tei388s Yes
Hardware lenovo thinksystem_sr670 - No
Operating System lenovo thinksystem_sr670_v2_firmware < 2.60_tgbt42h Yes
Hardware lenovo thinksystem_sr670_v2 - No
Operating System lenovo thinksystem_sr850_firmware < 3.72_tei388s Yes
Hardware lenovo thinksystem_sr850 - No
Operating System lenovo thinksystem_sr850_v2_firmware < 2.60_tgbt42h Yes
Hardware lenovo thinksystem_sr850_v2 - No
Operating System lenovo thinksystem_sr850p_firmware < 3.72_tei388s Yes
Hardware lenovo thinksystem_sr850p - No
Operating System lenovo thinksystem_sr860_firmware < 3.72_tei388s Yes
Hardware lenovo thinksystem_sr860 - No
Operating System lenovo thinksystem_sr860_v2_firmware < 2.60_tgbt42h Yes
Hardware lenovo thinksystem_sr860_v2 - No
Operating System lenovo thinksystem_sr950_firmware < 2.75_psi348s Yes
Hardware lenovo thinksystem_sr950 - No
Operating System lenovo thinksystem_st250_firmware < 3.72_tei388s Yes
Hardware lenovo thinksystem_st250 - No
Operating System lenovo thinksystem_st250_v2_firmware < 2.60_tgbt42h Yes
Hardware lenovo thinksystem_st250_v2 - No
Operating System lenovo thinksystem_st258_firmware < 3.72_tei388s Yes
Hardware lenovo thinksystem_st258 - No
Operating System lenovo thinksystem_st258_v2_firmware < 2.60_tgbt42h Yes
Hardware lenovo thinksystem_st258_v2 - No
Operating System lenovo thinksystem_st550_firmware < 8.88_cdi3a4a Yes
Hardware lenovo thinksystem_st550 - No
Operating System lenovo thinksystem_st650_v2_firmware < 2.60_tgbt42h Yes
Hardware lenovo thinksystem_st650_v2 - No
Operating System lenovo thinksystem_st658_v2_firmware < 2.60_tgbt42h Yes
Hardware lenovo thinksystem_st658_v2 - No
References