CVE-2017-3764

5.3MEDIUM

Key Information:

Vendor
Lenovo
Status
Xclarity Administrator
Vendor
CVE Published:
30 November 2017

Summary

A vulnerability was identified in Lenovo XClarity Administrator (LXCA) before 1.4.0 where LXCA user account names may be exposed to unauthenticated users with access to the LXCA web user interface. No password information of the user accounts is exposed.

Affected Version(s)

xClarity Administrator Earlier than 1.4.0

References

https://support.lenovo.com/us/en/product_security/LEN-16335
x_refsource_CONFIRM

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.