CVE-2024-45103: Medium severity lenovo xclarity administrator vulnerability
A valid, authenticated LXCA user may be able to unmanage an LXCA managed device in through the LXCA web interface without sufficient privileges.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-45103?
CVE-2024-45103 is rated as a high severity vulnerability due to its potential impact on device management security.
How do I fix CVE-2024-45103?
To mitigate CVE-2024-45103, ensure you update Lenovo XClarity Administrator to version 4.1.0 or later to address the privilege escalation issue.
Who is affected by CVE-2024-45103?
CVE-2024-45103 affects validated users of Lenovo XClarity Administrator versions prior to 4.1.0.
What actions can an authenticated user take regarding CVE-2024-45103?
An authenticated user may unmanage devices through the LXCA web interface without having the appropriate permissions, posing a risk to device control.
Is there a workaround for CVE-2024-45103?
There are no recommended workarounds for CVE-2024-45103 besides upgrading to the fixed version of Lenovo XClarity Administrator.