Lucene search
HistoryJun 26, 2023 - 8:15 p.m.
CVE-2023-34421
lxca user
filesystem data
crafted web api call
input validation
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
0.0005 Low
EPSS
Percentile
16.1%
A valid, authenticated LXCA user with elevated privileges may be able to replace filesystem data through a specifically crafted web API call due to insufficient input validation.
Affected configurations
Node
lenovoxclarity_administratorRange<4.0.0
Related
prion
prion
Input validation
2023-06-26 20:15:00
cvelist
cvelist
CVE-2023-34421
2023-06-26 19:45:26
cve
cve
CVE-2023-34421
2023-06-26 20:15:10
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
0.0005 Low
EPSS
Percentile
16.1%
Related for NVD:CVE-2023-34421