2024-09-13 20:03:17 +00:00
{
"id" : "CVE-2024-8059" ,
"sourceIdentifier" : "psirt@lenovo.com" ,
"published" : "2024-09-13T18:15:06.430" ,
2024-09-14 12:03:16 +00:00
"lastModified" : "2024-09-14T11:47:14.677" ,
"vulnStatus" : "Awaiting Analysis" ,
2024-09-13 20:03:17 +00:00
"cveTags" : [ ] ,
"descriptions" : [
{
"lang" : "en" ,
"value" : "IPMI credentials may be captured in XCC audit log entries when the account username length is 16 characters."
2024-09-22 02:03:17 +00:00
} ,
{
"lang" : "es" ,
"value" : "Las credenciales de IPMI se pueden capturar en las entradas del registro de auditor\u00eda de XCC cuando la longitud del nombre de usuario de la cuenta es de 16 caracteres."
2024-09-13 20:03:17 +00:00
}
] ,
"metrics" : {
"cvssMetricV31" : [
{
"source" : "psirt@lenovo.com" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" ,
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "LOW" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "LOW" ,
"integrityImpact" : "NONE" ,
"availabilityImpact" : "NONE" ,
"baseScore" : 4.3 ,
"baseSeverity" : "MEDIUM"
} ,
"exploitabilityScore" : 2.8 ,
"impactScore" : 1.4
}
]
} ,
"weaknesses" : [
{
"source" : "psirt@lenovo.com" ,
"type" : "Secondary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-319"
}
]
}
] ,
"references" : [
{
"url" : "https://support.lenovo.com/us/en/product_security/LEN-172051" ,
"source" : "psirt@lenovo.com"
}
]
}