CVE-2024-45102: Lenovo Xclarity Administrator

Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days.

A privilege escalation vulnerability was discovered that could allow a valid, authenticated LXCA user to escalate their permissions for a connected XCC instance when using LXCA as a Single Sign On (SSO) provider for XCC instances.

Affected products

• Lenovo Xclarity Administrator: before 4.1 (fixed in 4.1)

Published 2025-01-14. Last modified 2026-06-17.