CVE-2016-8221: High severity lenovo xclarity administrator vulnerability
Privilege Escalation in Lenovo XClarity Administrator earlier than 1.2.0, if LXCA is used to manage rack switches or chassis with embedded input/output modules (IOMs), certain log files viewable by authenticated users may contain passwords for internal administrative LXCA accounts with temporary passwords that are used internally by LXCA code.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-8221?
CVE-2016-8221 is classified as a high severity privilege escalation vulnerability.
How do I fix CVE-2016-8221?
To mitigate CVE-2016-8221, upgrade Lenovo XClarity Administrator to version 1.2.0 or later.
Who is affected by CVE-2016-8221?
CVE-2016-8221 affects Lenovo XClarity Administrator versions prior to 1.2.0 managing rack switches or chassis with embedded I/O modules.
What impact does CVE-2016-8221 have?
CVE-2016-8221 allows authenticated users to view sensitive log files that may expose passwords for internal administrative accounts.
Is there a workaround for CVE-2016-8221?
As of now, the recommended solution for CVE-2016-8221 is to update to the fixed version, as workarounds may not fully mitigate the risk.