CVE-2023-4605: Lenovo Xclarity Administrator

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

A valid authenticated Lenovo XClarity Administrator (LXCA) user can potentially leverage an unauthenticated API endpoint to retrieve system event information.

Affected products

• Lenovo Xclarity Administrator: before 3.6.28 (fixed in 3.6.28); before 4.0.24 (fixed in 4.0.24)

Published 2024-04-05. Last modified 2026-06-17.