CVE-2023-34418

A valid, authenticated LXCA user may be able to gain unauthorized access to events and other data stored in LXCA due to a SQL injection vulnerability in a specific web API...

CVE-2023-34418

CVE-2023-34418 affects Lenovo XClarity Administrator (LXCA). A SQL injection in a specific web API could let a valid, authenticated LXCA user access events and other data stored in LXCA. The available documents confirm the vulnerability and its impact but do not consistently provide a fixed versi...

CVE-2023-34418

A valid, authenticated LXCA user may be able to gain unauthorized access to events and other data stored in LXCA due to a SQL injection vulnerability in a specific web API...