6.1
Moyenne
CVE-2026-16792 An improper certificate validation vulnerability was reported in multiple Lenovo XClarity Orchestrator (LXCO) 2.2.0…
Description
An improper certificate validation vulnerability was reported in multiple Lenovo XClarity Orchestrator (LXCO) 2.2.0 microservices that could allow an adjacent network attacker to intercept sensitive communications by performing a machine-in-the-middle attack against HTTPS connections during TLS certificate validation under certain circumstances.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| XClarity Orchestrator 2.2 | premières → 2.2.0 | Pas de correctif indiqué |
Autres CVE de XClarity Orchestrator
Les 4 CVE de XClarity Orchestrator →
CVE-2026-16793
An improper neutralization of special elements used in an operating system command vulnerability was reported in…
8.8
Élevée
CVE-2021-3417
An internal product security audit of LXCO, prior to version 1.2.2, discovered that credentials for Lenovo XClarity…
4.9
Moyenne
CVE-2020-8356
An internal product security audit of LXCO, prior to version 1.2.2, discovered that optional passwords, if specified,…
4.9
Moyenne