CVE-2023-34421: Input Validation
A valid, authenticated LXCA user with elevated privileges may be able to replace filesystem data through a specifically crafted web API call due to insufficient input validation.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
LXCAto a version that resolves this vulnerability.Fixed in 4.0
Event History
Frequently Asked Questions
What is the severity of CVE-2023-34421?
The severity of CVE-2023-34421 is medium.
Who is affected by CVE-2023-34421?
Any user with elevated privileges on Lenovo XClarity Administrator version up to 4.0.0 may be affected by CVE-2023-34421.
How can an attacker exploit CVE-2023-34421?
An attacker with elevated privileges can exploit CVE-2023-34421 by making a specifically crafted web API call to replace filesystem data.
What is the recommended solution for CVE-2023-34421?
It is recommended to update Lenovo XClarity Administrator to a version that is not affected by CVE-2023-34421.
Where can I find more information about CVE-2023-34421?
More information about CVE-2023-34421 can be found at the following reference link: <https://support.lenovo.com/us/en/product_security/LEN-98715>