medium6.3
CVE-2024-45104
A valid, authenticated LXCA user without sufficient privileges may be able to use the device identifier to modify an LXCA managed device through a specially cr…
Impact
A valid, authenticated LXCA user without sufficient privileges may be able to use the device identifier to modify an LXCA managed device through a specially crafted web API call.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | Xclarity Administrator | before 4.1.0 |