LX
Product
Lenovo xClarity Administrator
3
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 0Low 0
Watch
Add Lenovo xClarity Administrator to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-9064 | 8.8 | Jul 30 | In Lenovo xClarity Administrator versions earlier than 2.1.0, an authenticated LXCA user may abuse a web API debug call to retrieve the credentials for the System Manager user Affected: Earlier than 2.1.0 |
| CVE-2018-9066 | 8.8 | Jul 30 | In Lenovo xClarity Administrator versions earlier than 2.1.0, an authenticated LXCA user can, under specific circumstances, inject additional parameters into a specific web API… Affected: Earlier than 2.1.0 |
| CVE-2018-9065 | 7.5 | Jul 30 | In Lenovo xClarity Administrator versions earlier than 2.1.0, an attacker that gains access to the underlying LXCA file system user may be able to retrieve a credential store… Affected: Earlier than 2.1.0 |
Showing 3