Lenovo Group Ltd. Lenovo Xclarity Administrator vulnerabilities
3 vulnerabilities
Known vulnerabilities in Lenovo Group Ltd. Lenovo Xclarity Administrator, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2018-9064lenovo group ltd.lenovo xclarity administrator+1
EPSS score0.96%
In Lenovo xClarity Administrator versions earlier than 2.1.0, an authenticated LXCA user may abuse a web API debug call to retrieve the credentials for the System Manager user.CVE-2018-9065lenovo group ltd.lenovo xclarity administrator+1EPSS score0.46%
In Lenovo xClarity Administrator versions earlier than 2.1.0, an attacker that gains access to the underlying LXCA file system user may be able to retrieve a credential store containing the service processor user names and passwords for servers previously managed by that LXCA instance, and potentially decrypt those credentials more easily than intended.CVE-2018-9066lenovo group ltd.lenovo xclarity administrator+1EPSS score2.24%
In Lenovo xClarity Administrator versions earlier than 2.1.0, an authenticated LXCA user can, under specific circumstances, inject additional parameters into a specific web API call which can result in privileged command execution within LXCA's underlying operating system.