CVE-2023-25495

A valid, authenticated administrative user can query a web interface API to reveal the configured LDAP client password used by XCC to authenticate to an external LDAP server in certain configurations. There is no exposure where no LDAP client password is configured

• lenovo thinkagile hx5530 firmware (< 2.93 afbt30p) • lenovo thinkagile hx7530 firmware (< 2.93 afbt30p) • lenovo thinkagile vx3331 firmware (< 2.93 afbt30p) • lenovo thinkagile hx enclosure firmware (< 3.72 tei388s) • lenovo thinkagile hx1021 firmware (< 3.72 tei388s) • lenovo thinkagile hx1320 firmware (< 8.88 cdi3a4a) • lenovo thinkagile hx1321 firmware (< 8.88 cdi3a4a) • lenovo thinkagile hx1331 firmware (< 2.93 afbt30p) • lenovo thinkagile hx1520-r firmware (< 8.88 cdi3a4a) • lenovo thinkagile hx1521-r firmware (< 8.88 cdi3a4a) • lenovo thinkagile hx2320-e firmware (< 8.88 cdi3a4a) • lenovo thinkagile hx2321 firmware (< 8.88 cdi3a4a) • lenovo thinkagile hx2330 firmware (< 2.93 afbt30p) • lenovo thinkagile hx2330 firmware 2.93 afbt30p • lenovo thinkagile hx2331 firmware (< 2.93 afbt30p) • lenovo thinkagile hx2720-e firmware (< 3.72 tei388s) • lenovo thinkagile hx3320 firmware (< 8.88 cdi3a4a) • lenovo thinkagile hx3321 firmware (< 8.88 cdi3a4a) • lenovo thinkagile hx3330 firmware (< 2.93 afbt30p) • lenovo thinkagile hx3331 firmware (< 2.93 afbt30p) • lenovo thinkagile hx3331 firmware (< 4.71 d8bt48p) • lenovo thinkagile hx3375 firmware (< 4.71 d8bt48p) • lenovo thinkagile hx3376 firmware (< 8.88 cdi3a4a) • lenovo thinkagile hx3520-g firmware (< 8.88 cdi3a4a) • lenovo thinkagile hx3521-g firmware (< 3.72 tei388s) • lenovo thinkagile hx3720 firmware (< 3.72 tei388s) • lenovo thinkagile hx3721 firmware (< 8.88 cdi3a4a) • lenovo thinkagile hx5520 firmware (< 8.88 cdi3a4a) • lenovo thinkagile hx5520-c firmware (< 8.88 cdi3a4a) • lenovo thinkagile hx5521 firmware (< 8.88 cdi3a4a) • lenovo thinkagile hx5521-c firmware (< 2.93 afbt30p) • lenovo thinkagile hx5531 firmware (< 8.88 cdi3a4a) • lenovo thinkagile hx7520 firmware (< 8.88 cdi3a4a) • lenovo thinkagile hx7521 firmware (< 2.93 afbt30p) • lenovo thinkagile hx7531 firmware (< 2.93 afbt30p) • lenovo thinkagile hx7531 firmware (< 2.75 psi348s) • lenovo thinkagile hx7820 firmware (< 2.75 psi348s) • lenovo thinkagile hx7821 firmware (< 3.72 tei388s) • lenovo thinkagile mx1020 firmware (< 2.93 afbt30p) • lenovo thinkagile mx3330-f firmware (< 2.93 afbt30p) • lenovo thinkagile mx3330-h firmware (< 2.93 afbt30p) • lenovo thinkagile mx3331-f firmware (< 2.93 afbt30p) • lenovo thinkagile mx3331-h firmware (< 2.93 afbt30p) • lenovo thinkagile mx3530 f firmware (< 2.93 afbt30p) • lenovo thinkagile mx3530-h firmware (< 2.93 afbt30p) • lenovo thinkagile mx3531 h firmware (< 2.93 afbt30p) • lenovo thinkagile mx3531-f firmware (< 3.72 tei388s) • lenovo thinkagile mx1021 on se350 firmware (< 3.72 tei388s) • lenovo thinkagile vx 1se firmware (< 3.72 tei388s) • lenovo thinkagile vx 2u4n firmware (< 3.72 tei388s) • lenovo thinkagile vx 4u firmware (< 2.75 psi348s) • lenovo thinkagile vx1320 firmware (< 3.72 tei388s) • lenovo thinkagile vx2320 firmware (< 8.88 cdi3a4a) • lenovo thinkagile vx2330 firmware (< 2.93 afbt30p) • lenovo thinkagile vx3320 firmware (< 8.88 cdi3a4a) • lenovo thinkagile vx3330 firmware (< 2.93 afbt30p) • lenovo thinkagile vx3520-g firmware (< 8.88 cdi3a4a) • lenovo thinkagile vx3530-g firmware (< 2.93 afbt30p) • lenovo thinkagile vx3720 firmware (< 3.72 tei388s) • lenovo thinkagile vx5520 firmware (< 8.88 cdi3a4a) … and 52 more