← Database
CVE-2023-25495
MEDIUM
CVSS: 4.9
Published: 2023-04-28
Modified: 2026-06-17
Description
A valid, authenticated administrative user can query a web interface API to reveal the configured LDAP client password used by XCC to authenticate to an external LDAP server in certain configurations. There is no exposure where no LDAP client password is configured
Affected Platforms
Lenovo Thinkagile Hx3720Lenovo Thinkagile Mx3331-HLenovo Thinkagile Vx3320 FirmwareLenovo Thinkagile Hx2331Lenovo Thinkagile Vx 1SeLenovo Thinkagile Mx3331-H FirmwareLenovo Thinkagile Vx2330Lenovo Thinkagile Vx7320 NLenovo Thinkagile Vx1320Lenovo Thinkagile Hx5520
Weakness Type
CWE-522, CWE-522