CVSS: 4.9EPSS: 0%CPEs: 1EXPL: 0CVE-2021-3417
https://notcve.org/view.php?id=CVE-2021-3417
An internal product security audit of LXCO, prior to version 1.2.2, discovered that credentials for Lenovo XClarity Administrator (LXCA), if added as a Resource Manager, are encoded then written to an internal LXCO log file each time a session is established with LXCA. Affected logs are captured in the First Failure Data Capture (FFDC) service log. The FFDC service log is only generated when requested by a privileged LXCO user and it is only accessible to the privileged LXCO user that requested the file. Una auditoría de seguridad de producto interna de LXCO, versiones anteriores a 1.2.2, detectó que las credenciales para Lenovo XClarity Administrator (LXCA), si se agregan como Administrador de Recursos, son codificadas y luego se escriben en un archivo de registro interno de LXCO cada vez que es establecida una sesión con LXCA. Los registros afectados son capturados en el registro del servicio First Failure Data Capture (FFDC). • https://support.lenovo.com/us/en/product_security/LEN-49884 • CWE-319: Cleartext Transmission of Sensitive Information •
CVSS: 4.9EPSS: 0%CPEs: 1EXPL: 0CVE-2020-8356
https://notcve.org/view.php?id=CVE-2020-8356
An internal product security audit of LXCO, prior to version 1.2.2, discovered that optional passwords, if specified, for the Syslog and SMTP forwarders are written to an internal LXCO log file in clear text. Affected logs are captured in the First Failure Data Capture (FFDC) service log. The FFDC service log is only generated when requested by a privileged LXCO user and it is only accessible to the privileged LXCO user that requested the file. Una auditoría de seguridad de producto interna de LXCO, versiones anteriores a 1.2.2, detectó que las contraseñas opcionales, si se especifican, para los reenviadores Syslog y SMTP son escritas en un archivo de registro interno de LXCO en texto sin cifrar. Unos registros afectados son capturados en el registro del servicio First Failure Data Capture (FFDC). • https://support.lenovo.com/us/en/product_security/LEN-49884 • CWE-319: Cleartext Transmission of Sensitive Information •