Skip to content
Not rated

CVE-2018-9064 In Lenovo xClarity Administrator versions earlier than 2.1.0, an authenticated LXCA user may abuse a web API debug…

Description

In Lenovo xClarity Administrator versions earlier than 2.1.0, an authenticated LXCA user may abuse a web API debug call to retrieve the credentials for the System Manager user.

Affected products and versions

Product Affected versions Fixed in
Lenovo xClarity Administrator Versions not published
The 3 CVEs of Lenovo xClarity Administrator →
Track this CVE