{"id":"CVE-2017-3770","state":"PUBLISHED","title":"Privilege escalation vulnerability in LXCA versions earlier than 1.3.2 where an authenticated user may be able to abuse certain web interface functionality to execute privileged co","description":"Privilege escalation vulnerability in LXCA versions earlier than 1.3.2 where an authenticated user may be able to abuse certain web interface functionality to execute privileged commands within the underlying LXCA operating system.","publishedAt":"2017-09-22T14:00:00.000Z","updatedAt":"2024-09-17T00:02:06.053Z","severity":null,"assigner":"lenovo","products":["Lenovo Group Ltd. Lenovo XClarity Administrator (LXCA)"],"affected":[{"vendor":"Lenovo Group Ltd.","product":"Lenovo XClarity Administrator (LXCA)","versions":[{"version":"Earlier than 1.3.2","status":"affected"}]}],"references":["https://support.lenovo.com/us/en/product_security/LEN-16333"],"weaknesses":[],"ingestedAt":"2026-10-29T19:43:42.704Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2017/3xxx/CVE-2017-3770.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2017-3770","state":"PUBLISHED","datePublished":"2017-09-22T14:00:00.000Z","dateUpdated":"2024-09-17T00:02:06.053Z","assignerShortName":"lenovo","assignerOrgId":"da227ddf-6e25-4b41-b023-0f976dcaca4b","dateReserved":"2016-12-16T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Privilege escalation vulnerability in LXCA versions earlier than 1.3.2 where an authenticated user may be able to abuse certain web interface functionality to execute privileged commands within the underlying LXCA operating system."}],"affected":[{"vendor":"Lenovo Group Ltd.","product":"Lenovo XClarity Administrator (LXCA)","versions":[{"version":"Earlier than 1.3.2","status":"affected"}]}],"references":[{"url":"https://support.lenovo.com/us/en/product_security/LEN-16333","tags":["x_refsource_CONFIRM"]}],"problemTypes":[{"descriptions":[{"description":"Privilege Escalation","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"lenovo","dateUpdated":"2017-09-22T13:57:01.000Z","orgId":"da227ddf-6e25-4b41-b023-0f976dcaca4b"},"datePublic":"2017-09-21T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@lenovo.com","DATE_PUBLIC":"2017-09-21T00:00:00","ID":"CVE-2017-3770","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Lenovo XClarity Administrator (LXCA)","version":{"version_data":[{"version_value":"Earlier than 1.3.2"}]}}]},"vendor_name":"Lenovo Group Ltd."}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Privilege escalation vulnerability in LXCA versions earlier than 1.3.2 where an authenticated user may be able to abuse certain web interface functionality to execute privileged commands within the underlying LXCA operating system."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Privilege Escalation"}]}]},"references":{"reference_data":[{"name":"https://support.lenovo.com/us/en/product_security/LEN-16333","refsource":"CONFIRM","url":"https://support.lenovo.com/us/en/product_security/LEN-16333"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://support.lenovo.com/us/en/product_security/LEN-16333","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T14:39:39.676Z"}}]}}}