CVE-2023-34420 (published 2023-06-26T19:45:12.130Z)
A valid, authenticated LXCA user with elevated privileges may be able to execute command injections through crafted calls to a specific web API.
Affected products: Vendor: Lenovo
Product: Lenovo XClarity Administrator
Versions: Versions prior to 4.0