CVE-2017-3764

A vulnerability was identified in Lenovo XClarity Administrator (LXCA) before 1.4.0 where LXCA user account names may be exposed to unauthenticated users with access to the LXCA web user interface. No password information of the user accounts is exposed.

Score

CVSS 3.0 5.3 Medium

Status

Modified - psirt@lenovo.com

Published

2017-11-30

Last modified

2024-09-17

Weaknesses

CWE-200

Affected products

• Xclarity Administrator (Lenovo)
• Xclarity Administrator (Lenovo Group Ltd.)

References

• https://support.lenovo.com/us/en/product_security/LEN-16335