An internal product security audit of LXCO, prior to version 1.2.2, discovered that credentials for Lenovo XClarity Administrator (LXCA), if added as a Resource Manager, are encoded then written to an internal LXCO log file each time a session is established with LXCA. Affected logs are captured in the First Failure Data Capture (FFDC) service log. The FFDC service log is only generated when requested by a privileged LXCO user and it is only accessible to the privileged LXCO user that requested the file.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: lenovo

Published: 2021-03-09T16:15:21.061681Z

Updated: 2024-09-16T16:28:25.678Z

Reserved: 2021-02-25T00:00:00

Link: CVE-2021-3417

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2021-03-09T17:15:12.923

Modified: 2024-11-21T06:21:27.430

Link: CVE-2021-3417

cve-icon Redhat

No data.