CVE-2024-45104

Lenovo / XClarity Administrator PUBLISHED

Description (CNA)

A valid, authenticated LXCA user without sufficient privileges may be able to use the device identifier to modify an LXCA managed device through a specially crafted web API call.

Affected (CNA)

Vendor / product	Versions
Lenovo / XClarity Administrator	affected 0 before 4.1

CWE

CWE-282

References

https://support.lenovo.com/us/en/product_security/LEN-154748

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.