VYPR
← All advisories
High severity8.8NVD Advisory· Published Jul 30, 2018· Updated Jun 17, 2026

CVE-2018-9064

CVE-2018-9064

Description

In Lenovo xClarity Administrator versions earlier than 2.1.0, an authenticated LXCA user may abuse a web API debug call to retrieve the credentials for the System Manager user.

Affected products

3
  • Lenovo/Xclarity Administrator3 versions
    cpe:2.3:a:lenovo:xclarity_administrator:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:lenovo:xclarity_administrator:*:*:*:*:*:*:*:*range: <2.1.0
    • (no CPE)range: <2.1.0
    • (no CPE)range: Earlier than 2.1.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.