CVE-2018-9065

7.5 highEPSS 0.5%

High (7.5) in lenovo xclarity administrator. EPSS 0.5% chance of exploitation in the next 30 days.

In Lenovo xClarity Administrator versions earlier than 2.1.0, an attacker that gains access to the underlying LXCA file system user may be able to retrieve a credential store containing the service processor user names and passwords for servers previously managed by that LXCA instance, and potentially decrypt those credentials more easily than intended.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 40% of CVEs (scores of 2026-10-31)
CWE: CWE-312
Published: 2018-07-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

lenovo:xclarity_administrator

References

https://support.lenovo.com/us/en/solutions/LEN-22168
https://support.lenovo.com/us/en/solutions/LEN-22168

Check your stack JSON