CVE-2024-8059

Published Sep 13, 2024 CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Description
IPMI credentials may be captured in XCC audit log entries when the account username length is 16 characters.

Remediation

Vendor Solution

Update XClarity Controller to the version (or newer) indicated for your model in the advisory:  https://support.lenovo.com/us/en/product_security/LEN-172051

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2024-48911 IPMI credentials may be captured in XCC audit log entries when the account username length is 16 characters.
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description IPMI credentials may be captured in XCC audit log entries when the account username length is 16 characters.
Weaknesses CWE-319
References
Metrics cvssV3_1

{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N'}

Subscriptions

No data.

Weaknesses

Sources

Status
PUBLISHED
Assigner
lenovo
Published
Updated
Sep 13, 2024, 5:55 PM
Reserved
Aug 21, 2024, 6:21 PM
Status
Deferred
Published
Sep 13, 2024, 6:15 PM
Modified
Jun 17, 2026, 8:21 AM