CVE-2018-9065: vulnerability in Lenovo xClarity Administrator
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.5%
In Lenovo xClarity Administrator versions earlier than 2.1.0, an attacker that gains access to the underlying LXCA file system user may be able to retrieve a credential store containing the service processor user names and passwords for servers previously managed by that LXCA instance, and potentially decrypt those credentials more easily than intended.
Affected products
Lenovo Group Ltd. · Lenovo xClarity AdministratorRelated CVEs — Lenovo xClarity Administrator
In the same product, most dangerous first.