CVE Vulnerabilities

CVE-2024-45103

Improper Ownership Management

Published: Sep 13, 2024 | Modified: Dec 13, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

A valid, authenticated LXCA user may be able to unmanage an LXCA managed device in through the LXCA web interface without sufficient privileges.

Weakness

The product assigns the wrong ownership, or does not properly verify the ownership, of an object or resource.

Affected Software

Name Vendor Start Version End Version
Xclarity_administrator Lenovo * 4.1.0 (excluding)

Potential Mitigations

References