- Added submission from Lenovo for LEN-16335 from 2017-11-30.

This commit is contained in:
CVE Team 2017-11-30 13:10:31 -05:00
parent b9e21b184d
commit 60131390f4
No known key found for this signature in database
GPG Key ID: 3504EC0FB4B2FE56

View File

@ -1,8 +1,32 @@
{
"CVE_data_meta" : {
"ASSIGNER" : "cve@mitre.org",
"ASSIGNER" : "psirt@lenovo.com",
"DATE_PUBLIC" : "2017-11-30T00:00:00",
"ID" : "CVE-2017-3764",
"STATE" : "RESERVED"
"STATE" : "PUBLIC"
},
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"product_name" : "xClarity Administrator",
"version" : {
"version_data" : [
{
"version_value" : "Earlier than 1.4.0"
}
]
}
}
]
},
"vendor_name" : "Lenovo Group Ltd."
}
]
}
},
"data_format" : "MITRE",
"data_type" : "CVE",
@ -11,7 +35,26 @@
"description_data" : [
{
"lang" : "eng",
"value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value" : "A vulnerability was identified in Lenovo XClarity Administrator (LXCA) where LXCA user account names may be exposed to unauthenticated users with access to the LXCA web user interface. No password information of the user accounts is exposed."
}
]
},
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng",
"value" : "Unauthenticated User Enumeration"
}
]
}
]
},
"references" : {
"reference_data" : [
{
"url" : "https://support.lenovo.com/us/en/product_security/LEN-16335"
}
]
}