High severity7.5NVD Advisory· Published Jul 30, 2018· Updated Jun 17, 2026
CVE-2018-9065
CVE-2018-9065
Description
In Lenovo xClarity Administrator versions earlier than 2.1.0, an attacker that gains access to the underlying LXCA file system user may be able to retrieve a credential store containing the service processor user names and passwords for servers previously managed by that LXCA instance, and potentially decrypt those credentials more easily than intended.
Affected products
3cpe:2.3:a:lenovo:xclarity_administrator:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:lenovo:xclarity_administrator:*:*:*:*:*:*:*:*range: <2.1.0
- (no CPE)range: <2.1.0
- (no CPE)range: Earlier than 2.1.0
Patches
Vulnerability mechanics
References
1- support.lenovo.com/us/en/solutions/LEN-22168nvdVendor Advisory
News mentions
0No linked articles in our index yet.