CVE-2024-45101

No fix known EPSS <1%CVSS 6.8

A privilege escalation vulnerability was discovered when Single Sign On (SSO) is enabled that could allow an attacker to intercept a valid, authenticated LXCA user’s XCC session if they can convince the user to click on a specially crafted URL.

Published 2024-09-13 · CVE record · OSV

Products: lenovo xclarity_administrator