NVD

Id
87289  
Name
CVE-2017-3745  
Description
In Lenovo XClarity Administrator (LXCA) before 1.3.0, if service data is downloaded from LXCA, a non-administrative user may have access to password information for users that have previously authenticated to the LXCA's internal LDAP server, including administrative accounts and service accounts with administrative privileges. This is an issue only for users who have used local authentication with LXCA and not remote authentication against external LDAP or ADFS servers.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-07-18  
Published
2017-06-19  
Modified Date
2017-06-30  
Seq
2017-3745  

Actions

Related NVD References

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
68810 JVNDB-2017-005067 Lenovo XClarity Administrator における認証に関する脆弱性 Lenovo XClarity Administrator (LXCA) には、認証に関する脆弱性が存在します。 CVE-2017-3745 0 CVE-2017-3745 87289 2.1 7.8 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-005067.html 2017-06-08 2017-07-13 View