CVE-2024-8059

State
Published
Severity
4.3 Medium
Published
Sep 13, 2024
Updated
Sep 13, 2024
Reserved
Aug 21, 2024

Read the record on cve.org

Description

IPMI credentials may be captured in XCC audit log entries when the account username length is 16 characters.

Scores

CVSSScoreVectorSource
3.14.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:Nlenovo

Weaknesses

  • CWE-319 Cleartext Transmission of Sensitive Information

Affected Products

ProductVersions
HX5530 Appliance (ThinkAgile) XCCLenovo
  • before 5.10 AFBT50FAffected
HX7530 Appliance (ThinkAgile) XCCLenovo
  • before 5.10 AFBT50FAffected
ST250 V3 (ThinkSystem) XCCLenovo
  • before 3.10 CTX318GAffected
VX3331 Certified Node (ThinkAgile) XCCLenovo
  • before 5.10 AFBT50FAffected
HX Enclosure Certified Node (ThinkAgile) XCCLenovo
  • before 6.40 TEI3F3EAffected
HX1021 Edge Certified Node 3yr (ThinkAgile) XCCLenovo
  • before 4.12 TEI3E4DAffected
HX1320 Appliance (ThinkAgile) XCCLenovo
  • before 9.98 CDI3B4EAffected
HX1321 Certified Node (ThinkAgile) XCCLenovo
  • before 9.98 CDI3B4EAffected
HX1331 Certified Node (ThinkAgile) XCCLenovo
  • before 5.10 AFBT50FAffected
HX1520-R Appliance (ThinkAgile) XCCLenovo
  • before 9.98 CDI3B4EAffected
HX1521-R Certified Node (ThinkAgile) XCCLenovo
  • before 9.98 CDI3B4EAffected
HX2320-E Appliance (ThinkAgile) XCCLenovo
  • before 9.98 CDI3B4EAffected
HX2321 Certified Node (ThinkAgile) XCCLenovo
  • before 9.98 CDI3B4EAffected
HX2330 Appliance (ThinkAgile) XCCLenovo
  • before 5.10 AFBT50FAffected
HX2331 Certified Node (ThinkAgile) XCCLenovo
  • before 5.10 AFBT50FAffected
HX2720-E Appliance (ThinkAgile) XCCLenovo
  • before 6.40 TEI3F3EAffected
HX3320 Appliance (ThinkAgile) XCCLenovo
  • before 9.98 CDI3B4EAffected
HX3321 Certified Node (ThinkAgile) XCCLenovo
  • before 9.98 CDI3B4EAffected
HX3330 Appliance (ThinkAgile) XCCLenovo
  • before 5.10 AFBT50FAffected
HX3331 Certified Node (ThinkAgile) XCCLenovo
  • before 5.10 AFBT50FAffected
HX3331 Node SAP HANA (ThinkAgile) XCCLenovo
  • before 5.10 AFBT50FAffected
HX3375 Appliance (ThinkAgile) XCCLenovo
  • before 5.80 D8BT66DAffected
HX3376 Certified Node (ThinkAgile) XCCLenovo
  • before 5.80 D8BT66DAffected
HX3520-G Appliance (ThinkAgile) XCCLenovo
  • before 9.98 CDI3B4EAffected
HX3521-G Certified Node (ThinkAgile) XCCLenovo
  • before 9.98 CDI3B4EAffected
HX3720 Appliance (ThinkAgile) XCCLenovo
  • before 6.40 TEI3F3EAffected
HX3721 Certified Node (ThinkAgile) XCCLenovo
  • before 6.40 TEI3F3EAffected
HX5520 Appliance (ThinkAgile) XCCLenovo
  • before 9.98 CDI3B4EAffected
HX5520-C Appliance (ThinkAgile) XCCLenovo
  • before 9.98 CDI3B4EAffected
HX5521 Certified Node (ThinkAgile) XCCLenovo
  • before 9.98 CDI3B4EAffected
HX5521-C Certified Node (ThinkAgile) XCCLenovo
  • before 9.98 CDI3B4EAffected
HX5531 Certified Node (ThinkAgile) XCCLenovo
  • before 5.10 AFBT50FAffected
HX7520 Appliance (ThinkAgile) XCCLenovo
  • before 9.98 CDI3B4EAffected
HX7521 Certified Node (ThinkAgile) XCCLenovo
  • before 9.98 CDI3B4EAffected
HX7530 Appl for SAP HANA (ThinkAgile) XCCLenovo
  • before 5.10 AFBT50FAffected
HX7531 Certified Node (ThinkAgile) XCCLenovo
  • before 5.10 AFBT50FAffected
HX7531 Node SAP HANA (ThinkAgile) XCCLenovo
  • before 5.10 AFBT50FAffected
HX7820 Appliance (ThinkAgile) XCCLenovo
  • before 3.20 PSI356BAffected
HX7821 Certified Node (ThinkAgile) XCCLenovo
  • before 3.20 PSI356BAffected
MX Edge Appliance - MX1020 (ThinkAgile) XCCLenovo
  • before 4.12 TEI3E4DAffected
MX3330-F All-flash Appliance (ThinkAgile) XCCLenovo
  • before 5.10 AFBT50FAffected
MX3330-H Hybrid Appliance (ThinkAgile) XCCLenovo
  • before 5.10 AFBT50FAffected
MX3331-F All-flash Certified node (ThinkAgile) XCCLenovo
  • before 5.10 AFBT50FAffected
MX3331-H Hybrid Certified node (ThinkAgile) XCCLenovo
  • before 5.10 AFBT50FAffected
MX3530 F All flash Appliance (ThinkAgile) XCCLenovo
  • before 5.10 AFBT50FAffected
MX3530-H Hybrid Appliance (ThinkAgile) XCCLenovo
  • before 5.10 AFBT50FAffected
MX3531 H Hybrid Certified node (ThinkAgile) XCCLenovo
  • before 5.10 AFBT50FAffected
MX3531-F All-flash Certified node (ThinkAgile) XCCLenovo
  • before 5.10 AFBT50FAffected
P920 Rack Workstation (ThinkStation) XCCLenovo
  • before 9.98 CDI3B4EAffected
SD530 (ThinkSystem) XCCLenovo
  • before 6.40 TEI3F3EAffected
SD530 V3 (ThinkSystem) XCCLenovo
  • before 1.20 USX364FAffected
SD550 V3 (ThinkSystem) XCCLenovo
  • before 1.20 USX364FAffected
SD630 V2 (ThinkSystem) XCCLenovo
  • before 4.12 TGBT52DAffected
SD650 DWC Dual Node Tray (ThinkSystem) XCCLenovo
  • before 6.40 TEI3F3EAffected
SD650 V2 (ThinkSystem) XCCLenovo
  • before 4.12 TGBT52DAffected
SD650 V3 (ThinkSystem) XCCLenovo
  • before 7.10 USX358FAffected
SD650-N V2 (ThinkSystem) XCCLenovo
  • before 4.12 TGBT52DAffected
SD665 V3 (ThinkSystem) XCCLenovo
  • before 7.10 QGX344GAffected
SE350 (ThinkSystem) XCCLenovo
  • before 4.12 TEI3E4DAffected
SE350 V2 (ThinkEdge) XCCLenovo
  • before 4.10 IYX330JAffected
SE360 V2 (ThinkEdge) XCCLenovo
  • before 4.10 IYX330JAffected
SE450 (ThinkEdge) XCCLenovo
  • before 4.10 USX360FAffected
SE455 V3 (ThinkEdge) XCCLenovo
  • before 4.10 MBX312KAffected
SN550 (ThinkSystem) XCCLenovo
  • before 6.40 TEI3F3EAffected
SN550 V2 (ThinkSystem) XCCLenovo
  • before 4.12 TGBT52DAffected
SN850 (ThinkSystem) XCCLenovo
  • before 6.40 TEI3F3EAffected
SR150 (ThinkSystem) XCCLenovo
  • before 6.40 TEI3F3EAffected
SR158 (ThinkSystem) XCCLenovo
  • before 6.40 TEI3F3EAffected
SR250 (ThinkSystem) XCCLenovo
  • before 6.40 TEI3F3EAffected
SR250 V2 (ThinkSystem) XCCLenovo
  • before 4.12 TGBT52DAffected
SR250 V3 (ThinkSystem) XCCLenovo
  • before 3.10 CTX318GAffected
SR258 (ThinkSystem) XCCLenovo
  • before 6.40 TEI3F3EAffected
SR258 V2 (ThinkSystem) XCCLenovo
  • before 4.12 TGBT52DAffected
SR258 V3 (ThinkSystem) XCCLenovo
  • before 3.10 CTX318GAffected
SR530 (ThinkSystem) XCCLenovo
  • before 9.98 CDI3B4EAffected
SR550 (ThinkSystem) XCCLenovo
  • before 9.98 CDI3B4EAffected
SR570 (ThinkSystem) XCCLenovo
  • before 9.98 CDI3B4EAffected
SR590 (ThinkSystem) XCCLenovo
  • before 9.98 CDI3B4EAffected
SR630 (ThinkSystem) XCCLenovo
  • before 9.98 CDI3B4EAffected
SR630 V2 (ThinkSystem) XCCLenovo
  • before 5.10 AFBT50FAffected
SR630 V3 (ThinkSystem) XCCLenovo
  • before 5.50 ESX334MAffected
SR635 V3 (ThinkSystem) XCCLenovo
  • before 3.50 KAX334NAffected
SR645 (ThinkSystem) XCCLenovo
  • before 5.80 D8BT66DAffected
SR645 V3 (ThinkSystem) XCCLenovo
  • before 3.50 KAX334NAffected
SR650 (ThinkSystem) XCCLenovo
  • before 9.98 CDI3B4EAffected
SR650 V2 (ThinkSystem) XCCLenovo
  • before 5.10 AFBT50FAffected
SR650 V3 (ThinkSystem) XCCLenovo
  • before 5.50 ESX334MAffected
SR655 V3 (ThinkSystem) XCCLenovo
  • before 3.50 KAX334NAffected
SR665 (ThinkSystem) XCCLenovo
  • before 5.80 D8BT66DAffected
SR665 V3 (ThinkSystem) XCCLenovo
  • before 3.50 KAX334NAffected
SR670 (ThinkSystem) XCCLenovo
  • before 4.12 TEI3E4DAffected
SR670 V2 (ThinkSystem) XCCLenovo
  • before 4.12 TGBT52DAffected
SR675 V3 (ThinkSystem) XCCLenovo
  • before 7.10 QGX344GAffected
SR850 (ThinkSystem) XCCLenovo
  • before 6.40 TEI3F3EAffected
SR850 V2 (ThinkSystem) XCCLenovo
  • before 4.12 TGBT52DAffected
SR850 V3 (ThinkSystem) XCCLenovo
  • before 5.10 RSX314GAffected
SR850P (ThinkSystem) XCCLenovo
  • before 4.12 TEI3E4DAffected
SR860 (ThinkSystem) XCCLenovo
  • before 6.40 TEI3F3EAffected
SR860 V2 (ThinkSystem) XCCLenovo
  • before 4.12 TGBT52DAffected
SR860 V3 (ThinkSystem) XCCLenovo
  • before 5.10 RSX314GAffected
SR950 (ThinkSystem) XCCLenovo
  • before 3.20 PSI356BAffected
SR950 V3 (ThinkSystem) XCCLenovo
  • before 4.10 EBX310FAffected
ST250 (ThinkSystem) XCCLenovo
  • before 6.40 TEI3F3EAffected
ST250 V2 (ThinkSystem) XCCLenovo
  • before 4.12 TGBT52DAffected
ST258 (ThinkSystem) XCCLenovo
  • before 6.40 TEI3F3EAffected
ST258 V2 (ThinkSystem) XCCLenovo
  • before 4.12 TGBT52DAffected
ST258 V3 (ThinkSystem) XCCLenovo
  • before 3.10 CTX318GAffected
ST550 (ThinkSystem) XCCLenovo
  • before 9.98 CDI3B4EAffected
ST650 V2 (ThinkSystem) XCCLenovo
  • before 4.12 TGBT52DAffected
ST650 V3 (ThinkSystem) XCCLenovo
  • before 7.10 USX358FAffected
ST658 V2 (ThinkSystem) XCCLenovo
  • before 4.12 TGBT52DAffected
ST658 V3 (ThinkSystem) XCCLenovo
  • before 7.10 USX358FAffected
ThinkAgile MX1021 on SE350 XCCLenovo
  • before 4.12 TEI3E4DAffected
VX 1SE Certified Node (ThinkAgile) XCCLenovo
  • before 6.40 TEI3F3EAffected
VX 2U4N Certified Node (ThinkAgile) XCCLenovo
  • before 6.40 TEI3F3EAffected
VX 4U Certified Node (ThinkAgile) XCCLenovo
  • before 3.20 PSI356BAffected
VX1320 (ThinkAgile) XCCLenovo
  • before 6.40 TEI3F3EAffected
VX2320 (ThinkAgile) XCCLenovo
  • before 9.98 CDI3B4EAffected
VX2330 Appliance (ThinkAgile) XCCLenovo
  • before 5.10 AFBT50FAffected
VX3320 (ThinkAgile) XCCLenovo
  • before 9.98 CDI3B4EAffected
VX3330 Appliance (ThinkAgile) XCCLenovo
  • before 5.10 AFBT50FAffected
VX3520-G (ThinkAgile) XCCLenovo
  • before 9.98 CDI3B4EAffected
VX3530-G Appliance (ThinkAgile) XCCLenovo
  • before 5.10 AFBT50FAffected
VX3720 (ThinkAgile) XCCLenovo
  • before 6.40 TEI3F3EAffected
VX5520 (ThinkAgile) XCCLenovo
  • before 9.98 CDI3B4EAffected
VX5530 Appliance (ThinkAgile) XCCLenovo
  • before 5.10 AFBT50FAffected
VX635 V3 Integrated System (ThinkAgile) XCCLenovo
  • before 3.50 KAX334NAffected
VX645 V3 Certified Node (ThinkAgile) XCCLenovo
  • before 3.50 KAX334NAffected
VX645 V3 Integrated System (ThinkAgile) XCCLenovo
  • before 3.50 KAX334NAffected
VX655 V3 Certified Node (ThinkAgile) XCCLenovo
  • before 3.50 KAX334NAffected
VX655 V3 Integrated System (ThinkAgile) XCCLenovo
  • before 3.50 KAX334NAffected
VX665 V3 Certified Node (ThinkAgile) XCCLenovo
  • before 3.50 KAX334NAffected
VX665 V3 Integrated System (ThinkAgile) XCCLenovo
  • before 3.50 KAX334NAffected
VX7320 N (ThinkAgile) XCCLenovo
  • before 9.98 CDI3B4EAffected
VX7330 Appliance (Thinkagile) XCCLenovo
  • before 5.10 AFBT50FAffected
VX7520 (ThinkAgile) XCCLenovo
  • before 9.98 CDI3B4EAffected
VX7520 N (ThinkAgile) XCCLenovo
  • before 9.98 CDI3B4EAffected
VX7530 Appliance (ThinkAgile) XCCLenovo
  • before 5.10 AFBT50FAffected
VX7531 Certified Node (ThinkAgile) XCCLenovo
  • before 5.10 AFBT50FAffected
VX7820 (ThinkAgile) XCCLenovo
  • before 3.20 PSI356BAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.