CVE-2024-45103 — Improper Ownership Management in Lenovo Xclarity Administrator

CWE-282 — Improper Ownership Management3 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
0.2%
top 62.67%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Lenovo Xclarity Administrator
Timeline
PublishedSep 13

Description

A valid, authenticated LXCA user may be able to unmanage an LXCA managed device in through the LXCA web interface without sufficient privileges.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:LExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

🔴Vulnerability Details

2
CVEList
CVE-2024-45103: A valid, authenticated LXCA user may be able to unmanage an LXCA managed device in through the LXCA web interface without sufficient privileges↗2024-09-13
▶
GHSA
GHSA-p5f6-v7vq-6742: A valid, authenticated LXCA user may be able to unmanage an LXCA managed device in through the LXCA web interface without sufficient privileges↗2024-09-13
▶
CVE-2024-45103 — Improper Ownership Management | cvebase