{"id":"CVE-2017-3770","aliases":["EUVD-2017-12887","GHSA-hjf4-fpwm-f98g"],"status":"published","title":"Privilege escalation vulnerability in LXCA versions earlier than 1.3.2 where an authenticated...","description":"Privilege escalation vulnerability in LXCA versions earlier than 1.3.2 where an authenticated user may be able to abuse certain web interface functionality to execute privileged commands within the underlying LXCA operating system.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01015,"percentile":0.63512,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2017-09-22T14:00:00Z","modified":"2026-06-17T01:18:54Z","products":[{"vendor":"lenovo","product":"xclarity_administrator"},{"vendor":"lenovo group ltd.","product":"lenovo xclarity administrator (lxca)"}],"references":[{"url":"https://support.lenovo.com/us/en/product_security/LEN-16333","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3770"},{"url":"https://github.com/advisories/GHSA-hjf4-fpwm-f98g"}],"sources":{"cve":[{"id":"CVE-2017-3770","description":"Privilege escalation vulnerability in LXCA versions earlier than 1.3.2 where an authenticated user may be able to abuse certain web interface functionality to execute privileged commands within the underlying LXCA operating system.","status":"published","published":"2017-09-22T14:00:00Z","modified":"2024-09-17T00:02:06.053Z","updated_at":"2026-11-02T14:33:16.232024Z"}],"euvd":[{"id":"EUVD-2017-12887","description":"Privilege escalation vulnerability in LXCA versions earlier than 1.3.2 where an authenticated user may be able to abuse certain web interface functionality to execute privileged commands within the underlying LXCA operating system.","status":"published","published":"2017-09-22T14:00:00Z","modified":"2024-09-17T00:02:06Z","updated_at":"2026-11-03T00:29:02.877229Z"}],"ghsa":[{"id":"GHSA-hjf4-fpwm-f98g","title":"Privilege escalation vulnerability in LXCA versions earlier than 1.3.2 where an authenticated...","description":"Privilege escalation vulnerability in LXCA versions earlier than 1.3.2 where an authenticated user may be able to abuse certain web interface functionality to execute privileged commands within the underlying LXCA operating system.","status":"published","published":"2022-05-13T01:45:53Z","modified":"2023-02-02T05:01:25Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T14:51:10.774738Z"}],"nvd":[{"id":"CVE-2017-3770","description":"Privilege escalation vulnerability in LXCA versions earlier than 1.3.2 where an authenticated user may be able to abuse certain web interface functionality to execute privileged commands within the underlying LXCA operating system.","status":"published","published":"2017-09-22T14:29:00.243Z","modified":"2026-06-17T01:18:54.31Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:03:59.716532Z"}]}}