6.5
Moyenne
CVE-2023-4605 A valid authenticated Lenovo XClarity Administrator (LXCA) user can potentially leverage an unauthenticated API endpoint…
Description
A valid authenticated Lenovo XClarity Administrator (LXCA) user can potentially leverage an unauthenticated API endpoint to retrieve system event information.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| XClarity Administrator 4.0 | premières → < 4.0.24 | 4.0.24 |
| XClarity Administrator 3.6 | premières → < 3.6.28 | 3.6.28 |
| xclarity_administrator 4.0 | premières → < 4.0.24 | 4.0.24 |
| xclarity_administrator 3.6 | premières → < 3.6.28 | 3.6.28 |
Autres CVE de XClarity Administrator
Les 6 CVE de XClarity Administrator →
CVE-2024-45102
A privilege escalation vulnerability was discovered that could allow a valid, authenticated LXCA user to escalate…
6.8
Moyenne
CVE-2024-45104
A valid, authenticated LXCA user without sufficient privileges may be able to use the device identifier to modify an…
6.3
Moyenne
CVE-2024-45103
A valid, authenticated LXCA user may be able to unmanage an LXCA managed device in through the LXCA web interface…
4.3
Moyenne
CVE-2024-45101
A privilege escalation vulnerability was discovered when Single Sign On (SSO) is enabled that could allow an attacker to…
6.8
Moyenne