Skip to content
Sign in
Not rated

CVE-2018-9066 In Lenovo xClarity Administrator versions earlier than 2.1.0, an authenticated LXCA user can, under specific…

Description

In Lenovo xClarity Administrator versions earlier than 2.1.0, an authenticated LXCA user can, under specific circumstances, inject additional parameters into a specific web API call which can result in privileged command execution within LXCA's underlying operating system.

Affected products and versions

Product Affected versions Fixed in
Lenovo xClarity Administrator Versions not published

Other CVEs of Lenovo xClarity Administrator

The 3 CVEs of Lenovo xClarity Administrator →
CVE-2018-9065 In Lenovo xClarity Administrator versions earlier than 2.1.0, an attacker that gains access to the underlying LXCA… Not rated CVE-2018-9064 In Lenovo xClarity Administrator versions earlier than 2.1.0, an authenticated LXCA user may abuse a web API debug… Not rated
Track this CVE