CVE-2018-9065: High severity Lenovo XClarity Administrator vulnerability
In Lenovo xClarity Administrator versions earlier than 2.1.0, an attacker that gains access to the underlying LXCA file system user may be able to retrieve a credential store containing the service processor user names and passwords for servers previously managed by that LXCA instance, and potentially decrypt those credentials more easily than intended.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-9065?
CVE-2018-9065 is a vulnerability in Lenovo xClarity Administrator versions earlier than 2.1.0.
How severe is CVE-2018-9065?
CVE-2018-9065 has a severity level of 7.5 (high).
How can an attacker exploit CVE-2018-9065?
An attacker can exploit CVE-2018-9065 by gaining access to the underlying LXCA file system user and retrieving a credential store containing service processor user names and passwords for previously managed servers.
What software is affected by CVE-2018-9065?
Lenovo xClarity Administrator versions earlier than 2.1.0 are affected by CVE-2018-9065.
Is there a fix for CVE-2018-9065?
Yes, upgrading to Lenovo xClarity Administrator version 2.1.0 or later fixes CVE-2018-9065.