A valid, authenticated LXCA user without sufficient privileges may be able to use the device identifier to modify an LXCA managed device through a specially crafted web API call.
References
| Link | Resource |
|---|---|
| https://support.lenovo.com/us/en/product_security/LEN-154748 | Vendor Advisory |
Configurations
History
13 Dec 2024, 19:19
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:emc:vmware:-:*:*:*:*:*:*:* cpe:2.3:o:redhat:kernel-based_virtual_machine:-:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.3 |
19 Sep 2024, 01:49
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://support.lenovo.com/us/en/product_security/LEN-154748 - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| CWE | NVD-CWE-noinfo | |
| CPE | cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* cpe:2.3:a:lenovo:xclarity_administrator:*:*:*:*:*:*:*:* cpe:2.3:o:redhat:kernel-based_virtual_machine:-:*:*:*:*:*:*:* cpe:2.3:a:emc:vmware:-:*:*:*:*:*:*:* |
|
| Summary |
|
|
| First Time |
Emc vmware
Redhat Lenovo Microsoft Redhat kernel-based Virtual Machine Lenovo xclarity Administrator Microsoft windows Emc |
13 Sep 2024, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-09-13 18:15
Updated : 2024-12-13 19:19
NVD link : CVE-2024-45104
Mitre link : CVE-2024-45104
CVE.ORG link : CVE-2024-45104
JSON object : View
Products Affected
lenovo
- xclarity_administrator
CWE