CVE-2024-45104

Published: Sep 13, 2024Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

A valid, authenticated LXCA user without sufficient privileges may be able to use the device identifier to modify an LXCA managed device through a specially crafted web API call.

Affected (1)

Products: Lenovo: Xclarity Administrator

Lenovo

1 product

Xclarity Administrator

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Lenovo Xclarity Administrator	Before 4.1.0

Related CWEs

CWE-282

Improper Ownership Management

The product assigns the wrong ownership, or does not properly verify the ownership, of an object or resource.

References (1)

https://support.lenovo.com/us/en/product_security/LEN-154748

Source: psirt@lenovo.com

Vendor Advisory

Timeline

No history available yet.