Skip to content

Known vulnerabilities in Lenovo XClarity Administrator

Is your version affected?

CVE Summary Score Published
CVE-2024-45102 A privilege escalation vulnerability was discovered that could allow a valid, authenticated LXCA user to escalate… 6.8 Medium Jan 14, 2025
CVE-2024-45104 A valid, authenticated LXCA user without sufficient privileges may be able to use the device identifier to modify an… 6.3 Medium Sep 13, 2024
CVE-2024-45103 A valid, authenticated LXCA user may be able to unmanage an LXCA managed device in through the LXCA web interface… 4.3 Medium Sep 13, 2024
CVE-2024-45101 A privilege escalation vulnerability was discovered when Single Sign On (SSO) is enabled that could allow an attacker to… 6.8 Medium Sep 13, 2024
CVE-2023-4605 A valid authenticated Lenovo XClarity Administrator (LXCA) user can potentially leverage an unauthenticated API endpoint… 6.5 Medium Apr 5, 2024
CVE-2020-8355 An internal product security audit of Lenovo XClarity Administrator (LXCA) prior to version 3.1.0 discovered the Windows… 4.9 Medium Feb 10, 2021

Other Lenovo products