cbcvebase.
CVE-2023-34420
published 2023-06-26

CVE-2023-34420: A valid, authenticated LXCA user with elevated privileges may be able to execute command injections through crafted calls to a specific web API.

high7.2CVSS 3.1
AVNACLPRHUINSUCHIHAH
A valid, authenticated LXCA user with elevated privileges may be able to execute command injections through crafted calls to a specific web API.

Affected

2 ranges
VendorProductVersion rangeFixed in
lenovolenovo_xclarity_administrator——
lenovoxclarity_administrator< 4.0.04.0.0