CVE-2023-34418 (published 2023-06-26T19:45:05.363Z)
A valid, authenticated LXCA user may be able to gain unauthorized access to events and other data stored in LXCA due to a SQL injection vulnerability in a specific web API.
Affected products: Vendor: Lenovo
Product: Lenovo XClarity Administrator
Versions: Versions prior to 4.0