Privilege Escalation in Lenovo XClarity Administrator Affects User Credentials

CVE-2016-8221

Summary

A vulnerability exists in Lenovo XClarity Administrator versions prior to 1.2.0 that could allow an authenticated user to escalate privileges. This arises when the software is employed to manage rack switches or chassis integrated with embedded input/output modules (IOMs). Certain log files, accessible by authenticated users, improperly display passwords linked to internal administrative LXCA accounts. These passwords, often temporary, are intended for internal use only within the LXCA system.

References