Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2016-8221

Опубликовано: 12 янв. 2017
Источник: nvd
CVSS3: 7
CVSS2: 1.9
EPSS Низкий

Описание

Privilege Escalation in Lenovo XClarity Administrator earlier than 1.2.0, if LXCA is used to manage rack switches or chassis with embedded input/output modules (IOMs), certain log files viewable by authenticated users may contain passwords for internal administrative LXCA accounts with temporary passwords that are used internally by LXCA code.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:lenovo:xclarity_administrator:*:*:*:*:*:*:*:*
Версия до 1.1.1 (включая)

EPSS

Процентиль: 18%
0.00057
Низкий

7 High

CVSS3

1.9 Low

CVSS2

Дефекты

CWE-264

Связанные уязвимости

CVSS3: 7
github
больше 3 лет назад

Privilege Escalation in Lenovo XClarity Administrator earlier than 1.2.0, if LXCA is used to manage rack switches or chassis with embedded input/output modules (IOMs), certain log files viewable by authenticated users may contain passwords for internal administrative LXCA accounts with temporary passwords that are used internally by LXCA code.

EPSS

Процентиль: 18%
0.00057
Низкий

7 High

CVSS3

1.9 Low

CVSS2

Дефекты

CWE-264