VYPR
← All advisories
High severity8.8NVD Advisory· Published Jul 30, 2018· Updated Jun 17, 2026

CVE-2018-9066

CVE-2018-9066

Description

In Lenovo xClarity Administrator versions earlier than 2.1.0, an authenticated LXCA user can, under specific circumstances, inject additional parameters into a specific web API call which can result in privileged command execution within LXCA's underlying operating system.

Affected products

3
  • Lenovo/Xclarity Administrator3 versions
    cpe:2.3:a:lenovo:xclarity_administrator:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:lenovo:xclarity_administrator:*:*:*:*:*:*:*:*range: <2.1.0
    • (no CPE)range: <2.1.0
    • (no CPE)range: Earlier than 2.1.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.