69 matches found
Lenovo XClarity Controller (XCC) Vulnerabilities - Lenovo Support US
No description provided...
CVE-2021-3956
A read-only authentication bypass vulnerability was reported in the Third Quarter 2021 release of Lenovo XClarity Controller XCC firmware affecting XCC devices configured in LDAP Authentication Only Mode and using an LDAP server that supports “unauthenticated bind”, such as Microsoft Active...
CVE-2021-3956
A read-only authentication bypass vulnerability was reported in the Third Quarter 2021 release of Lenovo XClarity Controller XCC firmware affecting XCC devices configured in LDAP Authentication Only Mode and using an LDAP server that supports “unauthenticated bind”, such as Microsoft Active...
CVE-2021-3956
A read-only authentication bypass vulnerability was reported in the Third Quarter 2021 release of Lenovo XClarity Controller XCC firmware affecting XCC devices configured in LDAP Authentication Only Mode and using an LDAP server that supports “unauthenticated bind”, such as Microsoft Active...
CVE-2021-3956
A read-only authentication bypass vulnerability was reported in the Third Quarter 2021 release of Lenovo XClarity Controller XCC firmware affecting XCC devices configured in LDAP Authentication Only Mode and using an LDAP server that supports “unauthenticated bind”, such as Microsoft Active...
Read-Only LDAP Authentication Bypass Vulnerability in Lenovo XClarity Controller (XCC) Firmware - Lenovo Support US
No description provided...
Lenovo XClarity Controller 安全漏洞
Lenovo XClarity Controller XCC is a server-embedded management engine from Lenovo, China, that is used to standardize and automate basic server management tasks. A security vulnerability exists in Lenovo XClarity Controller, which originates from a vulnerability that affects XCC devices that are...
CVE-2021-3473
An internal product security audit of Lenovo XClarity Controller XCC discovered that the XCC configuration backup/restore password may be written to an internal XCC log buffer if Lenovo XClarity Administrator LXCA is used to perform the backup/restore. The backup/restore password typically exists...
CVE-2021-3473
An internal product security audit of Lenovo XClarity Controller XCC discovered that the XCC configuration backup/restore password may be written to an internal XCC log buffer if Lenovo XClarity Administrator LXCA is used to perform the backup/restore. The backup/restore password typically exists...
CVE-2021-3473
CVE-2021-3473 affects Lenovo XClarity Controller (XCC). An internal security audit found that during LXCA-assisted backup/restore, the XCC configuration backup/restore password may be written to an internal log buffer and briefly persist (typically
Lenovo XClarity Controller (XCC) Information Disclosure Vulnerability - Lenovo Support US
No description provided...
Lenovo XClarity Controller 安全漏洞
Lenovo XClarity Controller XCC is a server-embedded management engine from Lenovo China that is used to standardize and automate basic server management tasks. A security vulnerability exists in Lenovo XClarity Controller that stems from. An internal product security audit of Lenovo XCC Lenovo...
Security Bulletin: Multiple Vulnerabilities in firmware supporting products shipped with IBM Clouf Pak System
Summary Multiple Vulnerabilities in firmware supporting products shipped with IBM Clouf Pak System. IBM Cloud Pak System addressed vulnerabilities. Vulnerability Details CVEID: CVE-2019-6187 DESCRIPTION: Lenovo XClarity Controller XCC could allow a local authenticated attacker to execute arbitrar...
Lenovo XClarity Controller Privilege Permission and Access Control Issues Vulnerability
Lenovo XClarity Controller XCC is a server-embedded management engine from Lenovo, China, that is used to standardize and automate basic server management tasks. A vulnerability exists in Lenovo XCC prior to version 3.08 CDI340V, prior to version 3.01 TEI392O, and prior to version 1.71 PSI328N fo...
CVE-2019-6195
An authorization bypass exists in Lenovo XClarity Controller XCC versions prior to 3.08 CDI340V, 3.01 TEI392O, 1.71 PSI328N where a valid authenticated user with lesser privileges may be granted read-only access to higher-privileged information if 1 “LDAP Authentication Only with Local...
CVE-2019-6195
An authorization bypass exists in Lenovo XClarity Controller XCC versions prior to 3.08 CDI340V, 3.01 TEI392O, 1.71 PSI328N where a valid authenticated user with lesser privileges may be granted read-only access to higher-privileged information if 1 “LDAP Authentication Only with Local...
CVE-2019-6195
An authorization bypass exists in Lenovo XClarity Controller XCC versions prior to 3.08 CDI340V, 3.01 TEI392O, 1.71 PSI328N where a valid authenticated user with lesser privileges may be granted read-only access to higher-privileged information if 1 “LDAP Authentication Only with Local...
CVE-2019-6195
Lenovo XClarity Controller (XCC) has an authorization bypass vulnerability (CVE-2019-6195) affecting XCC versions prior to 3.08 CDI340V, 3.01 TEI392O, 1.71 PSI328N. If configured with LDAP Authentication Only with Local Authorization and a lower-privileged user logs in within 1 minute of a higher...
Lenovo XClarity Controller (XCC) Vulnerability - Lenovo Support US
Lenovo Security Advisory: LEN-29116 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6195 Summary Description: An authorization bypass exists in Lenovo XClarity Controller XCC where a valid authenticated user with lesser privileges...
CVE-2019-6187
A stored CSV Injection vulnerability was reported in Lenovo XClarity Controller XCC that could allow an administrative or other appropriately permissioned user to store malformed data in certain XCC server informational fields, that could result in crafted formulas being stored in an exported CSV...