CVE-2023-34418

A valid, authenticated LXCA user may be able to gain unauthorized access to events and other data stored in LXCA due to a SQL injection vulnerability in a specific web API.

Score

CVSS 3.1 8.1 High

Status

Modified - psirt@lenovo.com

Published

2023-06-26

Last modified

2024-12-03

Weaknesses

CWE-89

Affected products

• Lenovo Xclarity Administrator (Lenovo)
• Xclarity Administrator (Lenovo)

References

• https://support.lenovo.com/us/en/product_security/LEN-98715