CVE-2016-8221
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Privilege Escalation in Lenovo XClarity Administrator earlier than 1.2.0, if LXCA is used to manage rack switches or chassis with embedded input/output modules (IOMs), certain log files viewable by authenticated users may contain passwords for internal administrative LXCA accounts with temporary passwords that are used internally by LXCA code.
Escalamiento de privilegios en Lenovo XClarity Administrator en versiones anteriores a 1.2.0, si LXCA se utiliza para gestionar switches de rack o chasis con módulos de entrada/salida incrustados (IOM), ciertos archivos de registro visibles por usuarios autenticados pueden contener contraseñas para cuentas administrativas internas LXCA con contraseñas temporales que se utilizan internamente por el código LXCA.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2016-09-16 CVE Reserved
- 2017-01-12 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-264: Permissions, Privileges, and Access Controls
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/95417 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://support.lenovo.com/us/en/product_security/LEN_10605 | 2017-01-19 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Lenovo Search vendor "Lenovo" | Xclarity Administrator Search vendor "Lenovo" for product "Xclarity Administrator" | <= 1.1.1 Search vendor "Lenovo" for product "Xclarity Administrator" and version " <= 1.1.1" | - |
Affected
| ||||||