Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Lenovo XClarity Orchestrator 1.2.2 Clear all filters
TI-2021-02382 CVE-2021-3417 · GHSA-f2gj-pfpv-hh8v

Cleartext transmission of sensitive information in Lenovo XClarity Orchestrator

Priority LOW 23

An internal product security audit of LXCO, prior to version 1.2.2, discovered that credentials for Lenovo XClarity Administrator (LXCA), if added as a Resource Manager, are encoded then written to an internal LXCO log f…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00561 Published 2021-03-09 Fixed in 1.2.2 CWE-319
TI-2020-06754 CVE-2020-8356 · GHSA-cxqv-ww34-rc46

Cleartext transmission of sensitive information in Lenovo XClarity Orchestrator

Priority LOW 23

An internal product security audit of LXCO, prior to version 1.2.2, discovered that optional passwords, if specified, for the Syslog and SMTP forwarders are written to an internal LXCO log file in clear text.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00561 Published 2021-03-09 Fixed in 1.2.2 CWE-319