← CVE Intelligence

CVE-2024-45101

Lenovo / XClarity Administrator PUBLISHED

Description (CNA)

A privilege escalation vulnerability was discovered when Single Sign On (SSO) is enabled that could allow an attacker to intercept a valid, authenticated LXCA user’s XCC session if they can convince the user to click on a specially crafted URL.

Affected (CNA)

Vendor / productVersions
Lenovo / XClarity Administratoraffected 0 before 4.1

CWE

CWE-319

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.