CVE-2024-38511

CVE-2024-38511 affects Lenovo XClarity Controller (XCC). A vulnerability in the upload processing functionality could allow a remote authenticated XCC user with elevated privileges to execute arbitrary commands via specially crafted file uploads. IBM’s bulletin for Cloud Pak System confirms XCC-b...