High severity8.8NVD Advisory· Published Jul 30, 2018· Updated Jun 17, 2026
CVE-2018-9064
CVE-2018-9064
Description
In Lenovo xClarity Administrator versions earlier than 2.1.0, an authenticated LXCA user may abuse a web API debug call to retrieve the credentials for the System Manager user.
Affected products
2<2.1.0+ 1 more
- (no CPE)range: <2.1.0
- (no CPE)range: Earlier than 2.1.0
Patches
Vulnerability mechanics
References
1- support.lenovo.com/us/en/solutions/LEN-22168nvdMitigationVendor Advisory
News mentions
0No linked articles in our index yet.