CVE-2024-45102 — Lenovo / XClarity Administrator

CVE-2024-45102

Lenovo / XClarity Administrator PUBLISHED

Description (CNA)

A privilege escalation vulnerability was discovered that could allow a valid, authenticated LXCA user to escalate their permissions for a connected XCC instance when using LXCA as a Single Sign On (SSO) provider for XCC instances.

Affected (CNA)

Vendor / product	Versions
Lenovo / XClarity Administrator	affected 0 before 4.1

CWE

CWE-319

References

https://support.lenovo.com/us/en/product_security/LEN-154748

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.