Filter
Lenovo Thinksystem Sr250 FirmwareAn authenticated XCC user can change permissions for any user through a crafted API command.
8.8
First published (updated )
Lenovo Thinkstation P920 FirmwareA valid, authenticated user may be able to trigger a denial of service of the XCC web user interface…
8.8
First published (updated )
Lenovo Thinkstation P920 FirmwareA valid LDAP user, under specific conditions, will default to read-only permissions when authenticat…
5.9
First published (updated )
Lenovo Thinkstation P920 FirmwareA valid, authenticated administrative user can query a web interface API to reveal the configured LD…
4.9
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Lenovo Thinkstation P920 FirmwareA valid, authenticated XCC user with read-only permissions can modify custom user roles on other use…
6.5
First published (updated )
Lenovo Thinkstation P920 FirmwareA valid XCC user's local account permissions overrides their active directory permissions under spec…
8.8
First published (updated )
Lenovo Thinkagile Vx3331 FirmwareThe Remote Mount feature can potentially be abused by valid, authenticated users to make connections…
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Lenovo Thinkcentre M75t Gen 2 FirmwareAn information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may…
4.4
First published (updated )
Lenovo XClarity ControllerAn internal product security audit of Lenovo XClarity Controller (XCC) discovered that the XCC confi…
4.9
First published (updated )