A valid, authenticated administrative user can query a web interface API to reveal the configured LDAP client password used by XCC to authenticate to an external LDAP server in certain configurations. There is no exposure where no LDAP client password is configured
References
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: lenovo

Published: 2023-04-28T21:26:12.202Z

Updated: 2023-04-28T21:26:12.202Z

Reserved: 2023-02-06T15:09:03.709Z


Link: CVE-2023-25495

JSON object: View

cve-icon NVD Information

Status : Analyzed

Published: 2023-04-28T22:15:08.950

Modified: 2023-05-09T20:36:34.067


Link: CVE-2023-25495

JSON object: View

cve-icon Redhat Information

No data.

CWE