Command injection

2023-06-2620:15:00

PRIOn knowledge base

www.prio-n.com

lxca

web api

authenticated user

elevated privileges

command injection

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.4%

A valid, authenticated LXCA user with elevated privileges may be able to execute command injections through crafted calls to a specific web API.

CPENameOperatorVersion
xclarity_administratorlt4.0.0

CPE	Name	Operator	Version
	xclarity_administrator	lt	4.0.0

References

support.lenovo.com/us/en/product_security/LEN-98715