6.5
Medium
CVE-2023-4605 A valid authenticated Lenovo XClarity Administrator (LXCA) user can potentially leverage an unauthenticated API endpoint…
Description
A valid authenticated Lenovo XClarity Administrator (LXCA) user can potentially leverage an unauthenticated API endpoint to retrieve system event information.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| XClarity Administrator 4.0 | earliest → < 4.0.24 | 4.0.24 |
| XClarity Administrator 3.6 | earliest → < 3.6.28 | 3.6.28 |
| xclarity_administrator 4.0 | earliest → < 4.0.24 | 4.0.24 |
| xclarity_administrator 3.6 | earliest → < 3.6.28 | 3.6.28 |
Other CVEs of XClarity Administrator
The 6 CVEs of XClarity Administrator →
CVE-2024-45102
A privilege escalation vulnerability was discovered that could allow a valid, authenticated LXCA user to escalate…
6.8
Medium
CVE-2024-45104
A valid, authenticated LXCA user without sufficient privileges may be able to use the device identifier to modify an…
6.3
Medium
CVE-2024-45103
A valid, authenticated LXCA user may be able to unmanage an LXCA managed device in through the LXCA web interface…
4.3
Medium
CVE-2024-45101
A privilege escalation vulnerability was discovered when Single Sign On (SSO) is enabled that could allow an attacker to…
6.8
Medium