Lenovo XClarity Administrator

• CVE-2024-45102 Medium 6.8 A privilege escalation vulnerability was discovered that could allow a valid, authenticated LXCA user to escalate their permissions for a connected XCC instance when using LXCA as a Single Sign On (SS 0.2%
• CVE-2024-45104 Medium 6.3 A valid, authenticated LXCA user without sufficient privileges may be able to use the device identifier to modify an LXCA managed device through a specially crafted web API call. 0.2%
• CVE-2024-45103 Medium 4.3 A valid, authenticated LXCA user may be able to unmanage an LXCA managed device in through the LXCA web interface without sufficient privileges. 0.3%
• CVE-2024-45101 Medium 6.8 A privilege escalation vulnerability was discovered when Single Sign On (SSO) is enabled that could allow an attacker to intercept a valid, authenticated LXCA user’s XCC session if they can convince t 0.2%
• CVE-2023-4605 Medium 6.5 A valid authenticated Lenovo XClarity Administrator (LXCA) user can potentially leverage an unauthenticated API endpoint to retrieve system event information. 0.5%
• CVE-2020-8355 Medium 4.9 An internal product security audit of Lenovo XClarity Administrator (LXCA) prior to version 3.1.0 discovered the Windows OS credentials provided by the LXCA user to perform driver updates of managed s 0.5%