{"id":"CVE-2023-29057","aliases":["EUVD-2023-32660","GHSA-9gph-8xxh-c4w6"],"status":"published","title":"A valid XCC user's local account permissions overrides their active directory permissions under...","description":"A valid XCC user's local account permissions overrides their active directory permissions under specific configurations. This could lead to a privilege escalation. To be vulnerable, LDAP must be configured for authentication/authorization and logins configured as “Local First, then LDAP”.","severity":{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.005,"percentile":0.43169,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-276"],"published":"2023-04-28T20:53:13Z","modified":"2026-06-17T05:49:16Z","products":[{"vendor":"lenovo","product":"thinkagile_hx1021_firmware"},{"vendor":"lenovo","product":"thinkagile_hx1320_firmware"},{"vendor":"lenovo","product":"thinkagile_hx1321_firmware"},{"vendor":"lenovo","product":"thinkagile_hx1331_firmware"},{"vendor":"lenovo","product":"thinkagile_hx1520-r_firmware"},{"vendor":"lenovo","product":"thinkagile_hx1521-r_firmware"},{"vendor":"lenovo","product":"thinkagile_hx2320-e_firmware"},{"vendor":"lenovo","product":"thinkagile_hx2321_firmware"},{"vendor":"lenovo","product":"thinkagile_hx2330_firmware"},{"vendor":"lenovo","product":"thinkagile_hx2331_firmware"},{"vendor":"lenovo","product":"thinkagile_hx2720-e_firmware"},{"vendor":"lenovo","product":"thinkagile_hx3320_firmware"},{"vendor":"lenovo","product":"thinkagile_hx3321_firmware"},{"vendor":"lenovo","product":"thinkagile_hx3330_firmware"},{"vendor":"lenovo","product":"thinkagile_hx3331_firmware"},{"vendor":"lenovo","product":"thinkagile_hx3375_firmware"},{"vendor":"lenovo","product":"thinkagile_hx3376_firmware"},{"vendor":"lenovo","product":"thinkagile_hx3520-g_firmware"},{"vendor":"lenovo","product":"thinkagile_hx3521-g_firmware"},{"vendor":"lenovo","product":"thinkagile_hx3720_firmware"},{"vendor":"lenovo","product":"thinkagile_hx3721_firmware"},{"vendor":"lenovo","product":"thinkagile_hx5520-c_firmware"},{"vendor":"lenovo","product":"thinkagile_hx5520_firmware"},{"vendor":"lenovo","product":"thinkagile_hx5521-c_firmware"},{"vendor":"lenovo","product":"thinkagile_hx5521_firmware"},{"vendor":"lenovo","product":"thinkagile_hx5530_firmware"},{"vendor":"lenovo","product":"thinkagile_hx5531_firmware"},{"vendor":"lenovo","product":"thinkagile_hx7520_firmware"},{"vendor":"lenovo","product":"thinkagile_hx7521_firmware"},{"vendor":"lenovo","product":"thinkagile_hx7530_firmware"},{"vendor":"lenovo","product":"thinkagile_hx7531_firmware"},{"vendor":"lenovo","product":"thinkagile_hx7820_firmware"},{"vendor":"lenovo","product":"thinkagile_hx7821_firmware"},{"vendor":"lenovo","product":"thinkagile_hx_enclosure_firmware"},{"vendor":"lenovo","product":"thinkagile_mx1020_firmware"},{"vendor":"lenovo","product":"thinkagile_mx1021_on_se350_firmware"},{"vendor":"lenovo","product":"thinkagile_mx3330-f_firmware"},{"vendor":"lenovo","product":"thinkagile_mx3330-h_firmware"},{"vendor":"lenovo","product":"thinkagile_mx3331-f_firmware"},{"vendor":"lenovo","product":"thinkagile_mx3331-h_firmware"},{"vendor":"lenovo","product":"thinkagile_mx3530-h_firmware"},{"vendor":"lenovo","product":"thinkagile_mx3530_f_firmware"},{"vendor":"lenovo","product":"thinkagile_mx3531-f_firmware"},{"vendor":"lenovo","product":"thinkagile_mx3531_h_firmware"},{"vendor":"lenovo","product":"thinkagile_vx1320_firmware"},{"vendor":"lenovo","product":"thinkagile_vx2320_firmware"},{"vendor":"lenovo","product":"thinkagile_vx2330_firmware"},{"vendor":"lenovo","product":"thinkagile_vx3320_firmware"},{"vendor":"lenovo","product":"thinkagile_vx3330_firmware"},{"vendor":"lenovo","product":"thinkagile_vx3331_firmware"},{"vendor":"lenovo","product":"thinkagile_vx3520-g_firmware"},{"vendor":"lenovo","product":"thinkagile_vx3530-g_firmware"},{"vendor":"lenovo","product":"thinkagile_vx3720_firmware"},{"vendor":"lenovo","product":"thinkagile_vx5520_firmware"},{"vendor":"lenovo","product":"thinkagile_vx5530_firmware"},{"vendor":"lenovo","product":"thinkagile_vx7320_n_firmware"},{"vendor":"lenovo","product":"thinkagile_vx7330_firmware"},{"vendor":"lenovo","product":"thinkagile_vx7520_firmware"},{"vendor":"lenovo","product":"thinkagile_vx7520_n_firmware"},{"vendor":"lenovo","product":"thinkagile_vx7530_firmware"},{"vendor":"lenovo","product":"thinkagile_vx7531_firmware"},{"vendor":"lenovo","product":"thinkagile_vx7820_firmware"},{"vendor":"lenovo","product":"thinkagile_vx_1se_firmware"},{"vendor":"lenovo","product":"thinkagile_vx_2u4n_firmware"},{"vendor":"lenovo","product":"thinkagile_vx_4u_firmware"},{"vendor":"lenovo","product":"thinkedge_se450__firmware"},{"vendor":"lenovo","product":"thinkstation_p920_firmware"},{"vendor":"lenovo","product":"thinksystem_sd530_firmware"},{"vendor":"lenovo","product":"thinksystem_sd630_v2_firmware"},{"vendor":"lenovo","product":"thinksystem_sd650-n_v2_firmware"},{"vendor":"lenovo","product":"thinksystem_sd650_firmware"},{"vendor":"lenovo","product":"thinksystem_sd650_v2_firmware"},{"vendor":"lenovo","product":"thinksystem_se350_firmware"},{"vendor":"lenovo","product":"thinksystem_sn550_firmware"},{"vendor":"lenovo","product":"thinksystem_sn550_v2_firmware"},{"vendor":"lenovo","product":"thinksystem_sn850_firmware"},{"vendor":"lenovo","product":"thinksystem_sr150_firmware"},{"vendor":"lenovo","product":"thinksystem_sr158_firmware"},{"vendor":"lenovo","product":"thinksystem_sr250_firmware"},{"vendor":"lenovo","product":"thinksystem_sr250_v2_firmware"},{"vendor":"lenovo","product":"thinksystem_sr258_firmware"},{"vendor":"lenovo","product":"thinksystem_sr258_v2_firmware"},{"vendor":"lenovo","product":"thinksystem_sr530_firmware"},{"vendor":"lenovo","product":"thinksystem_sr550_firmware"},{"vendor":"lenovo","product":"thinksystem_sr570_firmware"},{"vendor":"lenovo","product":"thinksystem_sr590_firmware"},{"vendor":"lenovo","product":"thinksystem_sr630_firmware"},{"vendor":"lenovo","product":"thinksystem_sr630_v2_firmware"},{"vendor":"lenovo","product":"thinksystem_sr645_firmware"},{"vendor":"lenovo","product":"thinksystem_sr645_v3_firmware"},{"vendor":"lenovo","product":"thinksystem_sr650_firmware"},{"vendor":"lenovo","product":"thinksystem_sr650_v2_firmware"},{"vendor":"lenovo","product":"thinksystem_sr665_firmware"},{"vendor":"lenovo","product":"thinksystem_sr665_v3_firmware"},{"vendor":"lenovo","product":"thinksystem_sr670_firmware"},{"vendor":"lenovo","product":"thinksystem_sr670_v2_firmware"},{"vendor":"lenovo","product":"thinksystem_sr850_firmware"},{"vendor":"lenovo","product":"thinksystem_sr850_v2_firmware"},{"vendor":"lenovo","product":"thinksystem_sr850p_firmware"},{"vendor":"lenovo","product":"thinksystem_sr860_firmware"},{"vendor":"lenovo","product":"thinksystem_sr860_v2_firmware"},{"vendor":"lenovo","product":"thinksystem_sr950_firmware"},{"vendor":"lenovo","product":"thinksystem_st250_firmware"},{"vendor":"lenovo","product":"thinksystem_st250_v2_firmware"},{"vendor":"lenovo","product":"thinksystem_st258_firmware"},{"vendor":"lenovo","product":"thinksystem_st258_v2_firmware"},{"vendor":"lenovo","product":"thinksystem_st550_firmware"},{"vendor":"lenovo","product":"thinksystem_st650_v2_firmware"},{"vendor":"lenovo","product":"thinksystem_st658_v2_firmware"},{"vendor":"lenovo","product":"xclarity controller"}],"references":[{"url":"https://support.lenovo.com/us/en/product_security/LEN-118321","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-29057"},{"url":"https://github.com/advisories/GHSA-9gph-8xxh-c4w6"}],"sources":{"cve":[{"id":"CVE-2023-29057","description":"A valid XCC user's local account permissions overrides their active directory permissions under specific configurations. This could lead to a privilege escalation. To be vulnerable, LDAP must be configured for authentication/authorization and logins configured as “Local First, then LDAP”.","status":"published","published":"2023-04-28T20:53:13.267Z","modified":"2025-01-30T18:34:12.946Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:35:28.218693Z"}],"euvd":[{"id":"EUVD-2023-32660","description":"A valid XCC user's local account permissions overrides their active directory permissions under specific configurations. This could lead to a privilege escalation. To be vulnerable, LDAP must be configured for authentication/authorization and logins configured as “Local First, then LDAP”.","status":"published","published":"2023-04-28T20:53:13Z","modified":"2025-01-30T18:34:12Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:04:09.009549Z"}],"ghsa":[{"id":"GHSA-9gph-8xxh-c4w6","title":"A valid XCC user's local account permissions overrides their active directory permissions under...","description":"A valid XCC user's local account permissions overrides their active directory permissions under specific configurations. This could lead to a privilege escalation. To be vulnerable, LDAP must be configured for authentication/authorization and logins configured as “Local First, then LDAP”.","status":"published","published":"2023-07-06T19:24:19Z","modified":"2024-04-11T21:13:52Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H","level":"high"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:57:08.55794Z"}],"nvd":[{"id":"CVE-2023-29057","description":"A valid XCC user's local account permissions overrides their active directory permissions under specific configurations. This could lead to a privilege escalation. To be vulnerable, LDAP must be configured for authentication/authorization and logins configured as “Local First, then LDAP”.","status":"published","published":"2023-04-28T21:15:08.673Z","modified":"2026-06-17T05:49:16.55Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:07:59.151142Z"}]}}