High · 7.2 CVE-2023-34420 EUVD-2023-38497GHSA-hcr7-33vg-78fx

A valid, authenticated LXCA user with elevated privileges may be able to execute command injections through crafted calls to a specific web…

Published Jun 26, 2023 · Updated Dec 4, 2024 · Assigned by lenovo

Description

A valid, authenticated LXCA user with elevated privileges may be able to execute command injections through crafted calls to a specific web API.

Vendor	Product	Affected	Fixed
Lenovo	Lenovo XClarity Administrator	Versions prior to 4.0	—