124 matches found
Design/Logic Flaw
A vulnerability was identified in Lenovo XClarity Administrator LXCA before 1.4.0 where LXCA user account names may be exposed to unauthenticated users with access to the LXCA web user interface. No password information of the user accounts is exposed...
CVE-2017-3764
Lenovo XClarity Administrator (LXCA) prior to version 1.4.0 exposes LXCA user account names to unauthenticated users with access to the web UI. No password data is exposed. Impact is exposure of usernames via the LXCA web interface; remediation is to upgrade LXCA to 1.4.0 or later (Lenovo advisor...
CVE-2017-3764
A vulnerability was identified in Lenovo XClarity Administrator LXCA before 1.4.0 where LXCA user account names may be exposed to unauthenticated users with access to the LXCA web user interface. No password information of the user accounts is exposed...
Privilege escalation
Privilege escalation vulnerability in LXCA versions earlier than 1.3.2 where an authenticated user may be able to abuse certain web interface functionality to execute privileged commands within the underlying LXCA operating system...
CVE-2017-3770
Privilege escalation vulnerability in LXCA versions earlier than 1.3.2 where an authenticated user may be able to abuse certain web interface functionality to execute privileged commands within the underlying LXCA operating system...
CVE-2017-3763
An attacker who obtains access to the location where the LXCA file system is stored may be able to access credentials of local LXCA accounts in LXCA versions earlier than 1.3.2...
Design/Logic Flaw
An attacker who obtains access to the location where the LXCA file system is stored may be able to access credentials of local LXCA accounts in LXCA versions earlier than 1.3.2...
CVE-2017-3770
Privilege escalation vulnerability in LXCA versions earlier than 1.3.2 where an authenticated user may be able to abuse certain web interface functionality to execute privileged commands within the underlying LXCA operating system...
CVE-2017-3763
An attacker who obtains access to the location where the LXCA file system is stored may be able to access credentials of local LXCA accounts in LXCA versions earlier than 1.3.2...
CVE-2017-3770
CVE-2017-3770 describes a privilege-escalation vulnerability in Lenovo XClarity Administrator (LXCA) versions earlier than 1.3.2. An authenticated user could abuse certain web interface functionality to execute privileged commands in the LXCA underlying operating system. Public details in the con...
CVE-2017-3763
Lenovo XClarity Administrator (LXCA) prior to version 1.3.2 contains an information-disclosure vulnerability (CVE-2017-3763). Local LXCA account data is stored in a local LDAP database on the LXCA image; passwords and password histories are stored encoded rather than hashed, potentially allowing ...
CVE-2017-3763
An attacker who obtains access to the location where the LXCA file system is stored may be able to access credentials of local LXCA accounts in LXCA versions earlier than 1.3.2...
CVE-2017-3770
Privilege escalation vulnerability in LXCA versions earlier than 1.3.2 where an authenticated user may be able to abuse certain web interface functionality to execute privileged commands within the underlying LXCA operating system...
Attacker with Access to LXCA Filesystem Could Access Local LXCA Account Credentials and LXCA Authenticated Command Injection - us
Lenovo Security Advisory: LEN-16333 Potential Impact: An attacker who obtains access to the location where the LXCA file system is stored could access credentials of local LXCA accounts and Privilege escalation by an authenticated user Severity: Medium to High Scope of Impact: Lenovo Specific CVE...
CVE-2017-3745
In Lenovo XClarity Administrator LXCA before 1.3.0, if service data is downloaded from LXCA, a non-administrative user may have access to password information for users that have previously authenticated to the LXCA's internal LDAP server, including administrative accounts and service accounts wi...
CVE-2017-3745
Lenovo XClarity Administrator (LXCA) before 1.3.0 exposes password information for users who previously authenticated to LXCA’s internal LDAP when service data is downloaded. A non-administrative user could access credentials for accounts including administrative/service accounts with privileges,...
CVE-2016-8233
The CVE-2016-8233 entry concerns Lenovo XClarity Administrator (LXCA) prior to version 1.2.2, where log files could contain user credentials in clear text viewable by non-privileged users. The affected component is LXCA’s log generation mechanism; the root cause is credential data being stored in...
CVE-2016-8233
Log files generated by Lenovo XClarity Administrator LXCA versions earlier than 1.2.2 may contain user credentials in a non-secure, clear text form that could be viewed by a non-privileged user...
Credential disclosure in LXCA log files - us
Lenovo Security Advisory: LEN-11635 Potential Impact: Disclosure of credentials to a non-privileged user Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2016-8233 Summary Description: During an internal security review, log files generated by Lenovo XClarity Administrator LXCA...