CVE-2023-34421

A valid, authenticated LXCA user with elevated privileges may be able to replace filesystem data through a specifically crafted web API call due to insufficient input validation.

Score

CVSS 3.1 6.5 Medium

Status

Modified - psirt@lenovo.com

Published

2023-06-26

Last modified

2024-11-06

Weaknesses

CWE-20

Affected products

• Lenovo Xclarity Administrator (Lenovo)
• Xclarity Administrator (Lenovo)

References

• https://support.lenovo.com/us/en/product_security/LEN-98715