CVE-2024-45102

A privilege escalation vulnerability was discovered that could allow a valid, authenticated LXCA user to escalate their permissions for a connected XCC instance when using LXCA as a Single Sign On (SSO) provider for XCC instances.

Score

CVSS 3.1 6.8 Medium

Status

Deferred - psirt@lenovo.com

Published

2025-01-14

Last modified

2025-01-15

Weaknesses

CWE-319

Affected products

• Xclarity Administrator (Lenovo)

References

• https://support.lenovo.com/us/en/product_security/LEN-154748