6.8
Medium
CVE-2024-45101 A privilege escalation vulnerability was discovered when Single Sign On (SSO) is enabled that could allow an attacker to…
Description
A privilege escalation vulnerability was discovered when Single Sign On (SSO) is enabled that could allow an attacker to intercept a valid, authenticated LXCA user’s XCC session if they can convince the user to click on a specially crafted URL.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| XClarity Administrator 4.1 | earliest → < 4.1 | 4.1 |
| xclarity_administrator 4.1 | earliest → < 4.1 | 4.1 |
Other CVEs of XClarity Administrator
The 6 CVEs of XClarity Administrator →
CVE-2024-45102
A privilege escalation vulnerability was discovered that could allow a valid, authenticated LXCA user to escalate…
6.8
Medium
CVE-2024-45104
A valid, authenticated LXCA user without sufficient privileges may be able to use the device identifier to modify an…
6.3
Medium
CVE-2024-45103
A valid, authenticated LXCA user may be able to unmanage an LXCA managed device in through the LXCA web interface…
4.3
Medium
CVE-2023-4605
A valid authenticated Lenovo XClarity Administrator (LXCA) user can potentially leverage an unauthenticated API endpoint…
6.5
Medium