CVE-2024-38508

A privilege escalation vulnerability was discovered in the web interface or SSH captive command shell interface of XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via a specially crafted request.

Score
CVSS 3.1 7.2 High
Status
Deferred - psirt@lenovo.com
Published
2024-07-26
Last modified
2024-08-02
Weaknesses
CWE-78

Affected products

References

 
 
© AVABIS GmbH privacypolicy about