Skip to content
Sign in
6.8 Medium

CVE-2024-45102 A privilege escalation vulnerability was discovered that could allow a valid, authenticated LXCA user to escalate…

Description

A privilege escalation vulnerability was discovered that could allow a valid, authenticated LXCA user to escalate their permissions for a connected XCC instance when using LXCA as a Single Sign On (SSO) provider for XCC instances.

Affected products and versions

Product Affected versions Fixed in
XClarity Administrator 4.1 earliest → < 4.1 4.1

Other CVEs of XClarity Administrator

The 6 CVEs of XClarity Administrator →
CVE-2024-45104 A valid, authenticated LXCA user without sufficient privileges may be able to use the device identifier to modify an… 6.3 Medium CVE-2024-45103 A valid, authenticated LXCA user may be able to unmanage an LXCA managed device in through the LXCA web interface… 4.3 Medium CVE-2024-45101 A privilege escalation vulnerability was discovered when Single Sign On (SSO) is enabled that could allow an attacker to… 6.8 Medium CVE-2023-4605 A valid authenticated Lenovo XClarity Administrator (LXCA) user can potentially leverage an unauthenticated API endpoint… 6.5 Medium
Track this CVE