Lenovo XClarity Controller (XCC)

• CVE-2021-3956 Medium 4.3 A read-only authentication bypass vulnerability was reported in the Third Quarter 2021 release of Lenovo XClarity Controller (XCC) firmware affecting XCC devices configured in LDAP Authentication Only 0.8%
• CVE-2021-3473 Medium 4.5 An internal product security audit of Lenovo XClarity Controller (XCC) discovered that the XCC configuration backup/restore password may be written to an internal XCC log buffer if Lenovo XClarity Adm 0.5%