CVE-2023-34418
CVSS 3.1 Score 8.1 of 10 (high)
Details
Summary
CVE-2023-34418 is a recently disclosed vulnerability that affects the Linux Container Administration (LXCA) tool. Authenticated LXCA users with valid credentials can exploit a SQL injection flaw in a specific web API, allowing unauthorized access to events and other sensitive data stored in the system. An attacker could potentially use this vulnerability to gain privileged information or make unintended modifications, posing a significant risk to the security and confidentiality of containerized environments. Organizations using LXCA are strongly advised to apply the available patch or workaround to mitigate this issue.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Lenovo Xclarity Administrator
Affected Vendors
- Lenovo Companies
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions