{"id":"CVE-2017-3764","state":"PUBLISHED","title":"A vulnerability was identified in Lenovo XClarity Administrator (LXCA) before 1.4.0 where LXCA user account names may be exposed to unauthenticated users with access to the LXCA we","description":"A vulnerability was identified in Lenovo XClarity Administrator (LXCA) before 1.4.0 where LXCA user account names may be exposed to unauthenticated users with access to the LXCA web user interface. No password information of the user accounts is exposed.","publishedAt":"2017-11-30T19:00:00.000Z","updatedAt":"2024-09-17T02:46:43.637Z","severity":null,"assigner":"lenovo","products":["Lenovo Group Ltd. xClarity Administrator"],"affected":[{"vendor":"Lenovo Group Ltd.","product":"xClarity Administrator","versions":[{"version":"Earlier than 1.4.0","status":"affected"}]}],"references":["https://support.lenovo.com/us/en/product_security/LEN-16335"],"weaknesses":[],"ingestedAt":"2026-10-29T19:43:42.704Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2017/3xxx/CVE-2017-3764.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2017-3764","state":"PUBLISHED","datePublished":"2017-11-30T19:00:00.000Z","dateUpdated":"2024-09-17T02:46:43.637Z","assignerShortName":"lenovo","assignerOrgId":"da227ddf-6e25-4b41-b023-0f976dcaca4b","dateReserved":"2016-12-16T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A vulnerability was identified in Lenovo XClarity Administrator (LXCA) before 1.4.0 where LXCA user account names may be exposed to unauthenticated users with access to the LXCA web user interface. No password information of the user accounts is exposed."}],"affected":[{"vendor":"Lenovo Group Ltd.","product":"xClarity Administrator","versions":[{"version":"Earlier than 1.4.0","status":"affected"}]}],"references":[{"url":"https://support.lenovo.com/us/en/product_security/LEN-16335","tags":["x_refsource_CONFIRM"]}],"problemTypes":[{"descriptions":[{"description":"Unauthenticated User Enumeration","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"lenovo","dateUpdated":"2017-11-30T18:57:01.000Z","orgId":"da227ddf-6e25-4b41-b023-0f976dcaca4b"},"datePublic":"2017-11-30T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@lenovo.com","DATE_PUBLIC":"2017-11-30T00:00:00","ID":"CVE-2017-3764","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"xClarity Administrator","version":{"version_data":[{"version_value":"Earlier than 1.4.0"}]}}]},"vendor_name":"Lenovo Group Ltd."}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"A vulnerability was identified in Lenovo XClarity Administrator (LXCA) before 1.4.0 where LXCA user account names may be exposed to unauthenticated users with access to the LXCA web user interface. No password information of the user accounts is exposed."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Unauthenticated User Enumeration"}]}]},"references":{"reference_data":[{"name":"https://support.lenovo.com/us/en/product_security/LEN-16335","refsource":"CONFIRM","url":"https://support.lenovo.com/us/en/product_security/LEN-16335"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://support.lenovo.com/us/en/product_security/LEN-16335","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T14:39:40.402Z"}}]}}}