Lenovo Group Ltd. Xclarity Administrator vulnerabilities

3 vulnerabilities

Known vulnerabilities in Lenovo Group Ltd. Xclarity Administrator, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2016-8233lenovo group ltd.xclarity administrator+1
EPSS score
1.14%
Log files generated by Lenovo XClarity Administrator (LXCA) versions earlier than 1.2.2 may contain user credentials in a non-secure, clear text form that could be viewed by a non-privileged user.5.3CVE-2017-3764lenovo group ltd.xclarity administrator+1
EPSS score
0.89%
A vulnerability was identified in Lenovo XClarity Administrator (LXCA) before 1.4.0 where LXCA user account names may be exposed to unauthenticated users with access to the LXCA web user interface. No password information of the user accounts is exposed.7.8CVE-2017-3745lenovo group ltd.xclarity administrator+1
EPSS score
0.40%
In Lenovo XClarity Administrator (LXCA) before 1.3.0, if service data is downloaded from LXCA, a non-administrative user may have access to password information for users that have previously authenticated to the LXCA's internal LDAP server, including administrative accounts and service accounts with administrative privileges. This is an issue only for users who have used local authentication with LXCA and not remote authentication against external LDAP or ADFS servers.