CVE-2023-34422

概要

参考情報

• support.lenovo.com/us/en/product_security/LEN-98715 · Vendor Advisory

xclarity administrator のその他の脆弱性

• CVE-2024-45104中 6.5A valid, authenticated LXCA user without sufficient privileges may be able to use the device identifier to modify an LXCA managed device thr…
• CVE-2024-45103中 4.3A valid, authenticated LXCA user may be able to unmanage an LXCA managed device in through the LXCA web interface without sufficient privile…
• CVE-2023-3113高 7.5An unauthenticated XML external entity injection (XXE) vulnerability exists in LXCA's Common Information Model (CIM) server that could resul…
• CVE-2023-34421中 6.5A valid, authenticated LXCA user with elevated privileges may be able to replace filesystem data through a specifically crafted web API call…
• CVE-2023-34420高 7.2A valid, authenticated LXCA user with elevated privileges may be able to execute command injections through crafted calls to a specific web …