A valid, authenticated LXCA user may be able to gain unauthorized access to events and other data stored in LXCA due to a SQL injection vulnerability in a specific web API.
History

Tue, 03 Dec 2024 19:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: lenovo

Published: 2023-06-26T19:45:05.363Z

Updated: 2024-12-03T18:31:42.016Z

Reserved: 2023-06-05T19:15:31.604Z

Link: CVE-2023-34418

cve-icon Vulnrichment

Updated: 2024-08-02T16:10:06.834Z

cve-icon NVD

Status : Modified

Published: 2023-06-26T20:15:10.183

Modified: 2024-11-21T08:07:11.870

Link: CVE-2023-34418

cve-icon Redhat

No data.