Input validation

2023-06-2620:15:00

PRIOn knowledge base

www.prio-n.com

lxca

filesystem data

web api

input validation

6.3 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.1%

JSON

A valid, authenticated LXCA user with elevated privileges may be able to replace filesystem data through a specifically crafted web API call due to insufficient input validation.

CPENameOperatorVersion
xclarity_administratorlt4.0.0

CPE	Name	Operator	Version
	xclarity_administrator	lt	4.0.0

References

support.lenovo.com/us/en/product_security/LEN-98715