Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2018-9065

In Lenovo xClarity Administrator versions earlier than 2.1.0, an attacker that gains access to the underlying LXCA file system user may be able to retrieve a credential store conta

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
lenovo

Description

In Lenovo xClarity Administrator versions earlier than 2.1.0, an attacker that gains access to the underlying LXCA file system user may be able to retrieve a credential store containing the service processor user names and passwords for servers previously managed by that LXCA instance, and potentially decrypt those credentials more easily than intended.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Lenovo Group Ltd. Lenovo xClarity Administrator

  • Earlier than 2.1.0affected

References