A valid, authenticated LXCA user with elevated privileges may be able to execute command injections through crafted calls to a specific web API.
History

Wed, 04 Dec 2024 15:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: lenovo

Published: 2023-06-26T19:45:12.130Z

Updated: 2024-12-04T14:33:26.899Z

Reserved: 2023-06-05T19:15:31.605Z

Link: CVE-2023-34420

cve-icon Vulnrichment

Updated: 2024-08-02T16:10:06.970Z

cve-icon NVD

Status : Modified

Published: 2023-06-26T20:15:10.247

Modified: 2024-11-21T08:07:12.173

Link: CVE-2023-34420

cve-icon Redhat

No data.