CVE-2016-8221

CWE-2643 documents3 sources

Severity

7.0HIGH

EPSS

0.1%

top 82.29%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Lenovo Xclarity Administrator Lenovo Group Ltd. Xclarity Administrator (lxca)

Timeline

PublishedJan 12

Latest updateMay 17

Description

Privilege Escalation in Lenovo XClarity Administrator earlier than 1.2.0, if LXCA is used to manage rack switches or chassis with embedded input/output modules (IOMs), certain log files viewable by authenticated users may contain passwords for internal administrative LXCA accounts with temporary passwords that are used internally by LXCA code.

CVSS vector

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.0 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5lenovo_group_ltd./xclarity_administrator_(lxca)1.2.0

▶NVDlenovo/xclarity_administrator1.1.1

Patches

Patch: support.lenovo.com ↗Patch: support.lenovo.com ↗

🔴Vulnerability Details

GHSA

GHSA-x22w-gfvm-wmxm: Privilege Escalation in Lenovo XClarity Administrator earlier than 1↗2022-05-17

▶

CVEList

CVE-2016-8221: Privilege Escalation in Lenovo XClarity Administrator earlier than 1↗2017-01-12

▶