Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2024-45101

CVSS 6.8 · Medium EPSS 0.14% · P33
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2024-45101

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
A privilege escalation vulnerability was discovered when Single Sign On (SSO) is enabled that could allow an attacker to intercept a valid, authenticated LXCA user’s XCC session if they can convince the user to click on a specially crafted URL.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
敏感数据的明文传输
Source: NVD (National Vulnerability Database)
Vulnerability Title
Lenovo XClarity Administrator 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Lenovo XClarity Administrator（LXCA）是中国联想（Lenovo）公司的一套集中式资源管理解决方案。该产品能够为服务器、存储、网络交换机等提供无代理硬件管理功能。 Lenovo XClarity Administrator存在安全漏洞，该漏洞源于启用单点登录 (SSO) 时发现一个权限提升漏洞，如果攻击者能够说服用户点击特制的 URL，该漏洞可能允许攻击者拦截有效的、经过身份验证的 LXCA 用户的 XCC 会话。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
LenovoXClarity Administrator 0 ~ 4.1 -

II. Public POCs for CVE-2024-45101

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-45101

请登录查看更多情报信息。

Same Patch Batch · Lenovo · 2024-09-13 · 12 CVEs total

CVE-2024-82787.2 HIGHLenovo XClarity Controller 安全漏洞
CVE-2024-82797.2 HIGHLenovo XClarity Controller 安全漏洞
CVE-2024-82807.2 HIGHLenovo XClarity Controller 安全漏洞
CVE-2024-82817.2 HIGHLenovo XClarity Controller 安全漏洞
CVE-2024-77566.8 MEDIUMLenovo ThinkPad 安全漏洞
CVE-2024-31006.7 MEDIUMLenovo Notebook 安全漏洞
CVE-2024-45506.7 MEDIUMLenovo ThinkSystem和Lenovo ThinkStation 安全漏洞
CVE-2024-451056.7 MEDIUMLenovo ThinkSystem 安全漏洞
CVE-2024-451046.3 MEDIUMLenovo XClarity Administrator 安全漏洞
CVE-2024-80594.3 MEDIUMLenovo XClarity Controller 安全漏洞
CVE-2024-451034.3 MEDIUMLenovo XClarity Administrator 安全漏洞

IV. Related Vulnerabilities

Same product: XClarity Administrator
Same vendor: Lenovo
Same weakness: CWE-319

V. Comments for CVE-2024-45101

No comments yet

Leave a comment