high8.1
CVE-2023-34418
A valid, authenticated LXCA user may be able to gain unauthorized access to events and other data stored in LXCA due to a SQL injection vulnerability in a spec…
Impact
A valid, authenticated LXCA user may be able to gain unauthorized access to events and other data stored in LXCA due to a SQL injection vulnerability in a specific web API.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | Xclarity Administrator | before 4.0.0 |