CVE-2017-3770

2017-09-2100:00:00

lenovo

www.cve.org

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.9%

JSON

Privilege escalation vulnerability in LXCA versions earlier than 1.3.2 where an authenticated user may be able to abuse certain web interface functionality to execute privileged commands within the underlying LXCA operating system.

CNA Affected

[
  {
    "product": "Lenovo XClarity Administrator (LXCA)",
    "vendor": "Lenovo Group Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "Earlier than 1.3.2"
      }
    ]
  }
]

References

support.lenovo.com/us/en/product_security/LEN-16333