What is CVE-2016-8221?

CVE-2016-8221 is a high-severity vulnerability in Lenovo Xclarity_administrator, classified under CWE-264. CVSS score: 7.0/10. Published 2017-01-12.

How severe is CVE-2016-8221?

High severity. CVSS v3 base score is 7.0 out of 10.

Vulnerability in Lenovo Xclarity_administrator

CVE-2016-8221

Privilege Escalation in Lenovo XClarity Administrator earlier than 1.2.0, if LXCA is used to manage rack switches or chassis with embedded input/output modules (IOMs), certain log files viewable by authenticated users may contain passwords…

EPSS: 0.003 (22.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.0 (High). Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Lenovo Xclarity_administrator
Lenovo Group Ltd. Xclarity Administrator (Lxca) — versions 1.2.0

Weakness classification (CWE)

CWE-264

References

psirt@lenovo.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
psirt@lenovo.com (x_refsource_CONFIRM, Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2016-8221?: CVE-2016-8221 is a high-severity vulnerability in Lenovo Xclarity_administrator, classified under CWE-264. CVSS score: 7.0/10. Published 2017-01-12.
How severe is CVE-2016-8221?: High severity. CVSS v3 base score is 7.0 out of 10.