CVE-2017-3763

Lenovo XClarity Administrator (LXCA) prior to version 1.3.2 contains an information-disclosure vulnerability (CVE-2017-3763). Local LXCA account data is stored in a local LDAP database on the LXCA image; passwords and password histories are stored encoded rather than hashed, potentially allowing ...

Attacker with Access to LXCA Filesystem Could Access Local LXCA Account Credentials and LXCA Authenticated Command Injection - us

Lenovo Security Advisory: LEN-16333 Potential Impact: An attacker who obtains access to the location where the LXCA file system is stored could access credentials of local LXCA accounts and Privilege escalation by an authenticated user Severity: Medium to High Scope of Impact: Lenovo Specific CVE...