CVE-2023-4606

Summary

CVE-2023-4606 is a vulnerability affecting ThinkSystem v2 and v3 servers with XCC. An authenticated user with Read-Only permissions can exploit this issue by crafting a specific API command to change the password of another user, bypassing standard access controls. This vulnerability poses a significant risk to security and confidentiality of user accounts on impacted systems. It's important for organizations using ThinkSystem servers with XCC to apply the necessary patches as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.