CVE-2023-34420

A valid, authenticated LXCA user with elevated privileges may be able to execute command injections through crafted calls to a specific web API.

Score

CVSS 3.1 7.2 High

Status

Modified - psirt@lenovo.com

Published

2023-06-26

Last modified

2024-12-04

Weaknesses

CWE-78

Affected products

• Lenovo Xclarity Administrator (Lenovo)
• Xclarity Administrator (Lenovo)

References

• https://support.lenovo.com/us/en/product_security/LEN-98715