← Database

CVE-2024-45104

MEDIUM CVSS: 6.3 Published: 2024-09-13 Modified: 2026-06-17

Description

A valid, authenticated LXCA user without sufficient privileges may be able to use the device identifier to modify an LXCA managed device through a specially crafted web API call.

Affected Platforms

Lenovo Xclarity Administrator

Weakness Type

CWE-282, NVD-CWE-noinfo

References