Description
A valid authenticated Lenovo XClarity Administrator (LXCA) user can potentially leverage an unauthenticated API endpoint to retrieve system event information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Lenovo | XClarity Administrator | – < 3.6.28, – < 4.0.24 | 3.6.28 |
Advisories 1
- WID-SEC-2024-0044 Lenovo XClarity: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Jan 9, 2024