High severity8.8NVD Advisory· Published Jul 30, 2018· Updated Jun 17, 2026
CVE-2018-9066
CVE-2018-9066
Description
In Lenovo xClarity Administrator versions earlier than 2.1.0, an authenticated LXCA user can, under specific circumstances, inject additional parameters into a specific web API call which can result in privileged command execution within LXCA's underlying operating system.
Affected products
2<2.1.0+ 1 more
- (no CPE)range: <2.1.0
- (no CPE)range: Earlier than 2.1.0
Patches
Vulnerability mechanics
References
1- support.lenovo.com/us/en/solutions/LEN-22168nvdVendor Advisory
News mentions
0No linked articles in our index yet.