CVE-2017-3770

High

Published: 22/09/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Privilege escalation vulnerability in LXCA versions earlier than 1.3.2 that allows an authenticated user to abuse certain web interface functionality to execute privileged commands within the underlying LXCA operating system.

Risk Assessment

The organization may be exposed to unauthorized access to sensitive system functions, potentially leading to serious security breaches.

Recommendation

It is recommended to upgrade to LXCA version 1.3.2 or later to mitigate this vulnerability.

Other vulnerabilities in LXCA

CVE-2023-34421Medium
An authenticated LXCA user with elevated privileges may replace filesystem data through a specifically crafted web API call due to insufficient input validation.

Original NVD description (English source)

Privilege escalation vulnerability in LXCA versions earlier than 1.3.2 where an authenticated user may be able to abuse certain web interface functionality to execute privileged commands within the underlying LXCA operating system.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS