Summary
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Lenovo XClarity ausnutzen, um seine Privilegien zu erhöhen, beliebige Befehle auszuführen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen.
Product
Lenovo XClarity ist ein Verwaltungswerkzeug für Rechenzentren.
Vulnerabilities 5
-
High 7.2
A privilege escalation vulnerability was discovered in XCC that could allow a valid, authenticated XCC user with elevat…
-
High 7.2
A privilege escalation vulnerability was discovered in XCC that could allow a valid, authenticated XCC user with elevat…
-
High 7.2
An input validation weakness was discovered in XCC that could allow a valid, authenticated XCC user with elevated privi…
-
High 7.2
An input validation weakness was discovered in XCC that could allow a valid, authenticated XCC user with elevated privi…
-
Medium 4.3
IPMI credentials may be captured in XCC audit log entries when the account username length is 16 characters.
Revision history
-
#1
Initiale Fassung
References
-
Lenovo Security Advisory vom 2024-09-10
https://support.lenovo.com/us/en/product_security/LEN-172051