PT-2017-9548 · Lenovo · Lenovo Xclarity Administrator

Published 2017-03-01 · Updated 2017-03-03 · CVE-2016-8233

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Lenovo XClarity Administrator versions prior to 1.2.2

Description The issue concerns log files that may contain user credentials in clear text, potentially allowing a non-privileged user to view them.

Recommendations For versions prior to 1.2.2, update to version 1.2.2 or later to resolve the issue. As a temporary workaround, consider restricting access to log files to minimize the risk of exploitation.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2016-8233

Affected Products

Lenovo Xclarity Administrator

References · 4

• https://osv.dev/vulnerability/CVE-2016-8233 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-8233 · Security Note
• https://support.lenovo.com/us/en/product_security/LEN-11635 · Vendor Advisory
• http://securityfocus.com/bid/95992 · Note