CVE-2024-8059
IPMI credentials may be captured in XCC audit log entries when the account username length is 16...
4.3 Medium
IPMI credentials may be captured in XCC audit log entries when the account username length is 16 characters.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
Exploit likelihood
0.19%Up 0.1 points since Sep 14, 2024
What each source reports
CVE List Score used
IPMI credentials may be captured in XCC audit log entries when the account username length is 16 characters.
- Record
CVE-2024-8059- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-319
- Updated
- 2026-11-02
EUVDEUVD-2024-48911
IPMI credentials may be captured in XCC audit log entries when the account username length is 16 characters.
- Record
EUVD-2024-48911- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2hgx-34f4-hp3q
IPMI credentials may be captured in XCC audit log entries when the account username length is 16...
IPMI credentials may be captured in XCC audit log entries when the account username length is 16 characters.
- Record
GHSA-2hgx-34f4-hp3q- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-319
- Updated
- 2026-11-02
NVD
IPMI credentials may be captured in XCC audit log entries when the account username length is 16 characters.
- Record
CVE-2024-8059- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-319
- Updated
- 2026-11-02
Affected products
- lenovo hx enclosure certified node (thinkagile) xcc
- lenovo hx1021 edge certified node 3yr (thinkagile) xcc
- lenovo hx1320 appliance (thinkagile) xcc
- lenovo hx1321 certified node (thinkagile) xcc
- lenovo hx1331 certified node (thinkagile) xcc
- lenovo hx1520-r appliance (thinkagile) xcc
- lenovo hx1521-r certified node (thinkagile) xcc
- lenovo hx2320-e appliance (thinkagile) xcc
- lenovo hx2321 certified node (thinkagile) xcc
- lenovo hx2330 appliance (thinkagile) xcc
- lenovo hx2331 certified node (thinkagile) xcc
- lenovo hx2720-e appliance (thinkagile) xcc
Show 128 moreShow less
- lenovo hx3320 appliance (thinkagile) xcc
- lenovo hx3321 certified node (thinkagile) xcc
- lenovo hx3330 appliance (thinkagile) xcc
- lenovo hx3331 certified node (thinkagile) xcc
- lenovo hx3331 node sap hana (thinkagile) xcc
- lenovo hx3375 appliance (thinkagile) xcc
- lenovo hx3376 certified node (thinkagile) xcc
- lenovo hx3520-g appliance (thinkagile) xcc
- lenovo hx3521-g certified node (thinkagile) xcc
- lenovo hx3720 appliance (thinkagile) xcc
- lenovo hx3721 certified node (thinkagile) xcc
- lenovo hx5520 appliance (thinkagile) xcc
- lenovo hx5520-c appliance (thinkagile) xcc
- lenovo hx5521 certified node (thinkagile) xcc
- lenovo hx5521-c certified node (thinkagile) xcc
- lenovo hx5530 appliance (thinkagile) xcc
- lenovo hx5531 certified node (thinkagile) xcc
- lenovo hx7520 appliance (thinkagile) xcc
- lenovo hx7521 certified node (thinkagile) xcc
- lenovo hx7530 appl for sap hana (thinkagile) xcc
- lenovo hx7530 appliance (thinkagile) xcc
- lenovo hx7531 certified node (thinkagile) xcc
- lenovo hx7531 node sap hana (thinkagile) xcc
- lenovo hx7820 appliance (thinkagile) xcc
- lenovo hx7821 certified node (thinkagile) xcc
- lenovo mx edge appliance - mx1020 (thinkagile) xcc
- lenovo mx3330-f all-flash appliance (thinkagile) xcc
- lenovo mx3330-h hybrid appliance (thinkagile) xcc
- lenovo mx3331-f all-flash certified node (thinkagile) xcc
- lenovo mx3331-h hybrid certified node (thinkagile) xcc
- lenovo mx3530 f all flash appliance (thinkagile) xcc
- lenovo mx3530-h hybrid appliance (thinkagile) xcc
- lenovo mx3531 h hybrid certified node (thinkagile) xcc
- lenovo mx3531-f all-flash certified node (thinkagile) xcc
- lenovo p920 rack workstation (thinkstation) xcc
- lenovo sd530 (thinksystem) xcc
- lenovo sd530 v3 (thinksystem) xcc
- lenovo sd550 v3 (thinksystem) xcc
- lenovo sd630 v2 (thinksystem) xcc
- lenovo sd650 dwc dual node tray (thinksystem) xcc
- lenovo sd650 v2 (thinksystem) xcc
- lenovo sd650 v3 (thinksystem) xcc
- lenovo sd650-n v2 (thinksystem) xcc
- lenovo sd665 v3 (thinksystem) xcc
- lenovo se350 (thinksystem) xcc
- lenovo se350 v2 (thinkedge) xcc
- lenovo se360 v2 (thinkedge) xcc
- lenovo se450 (thinkedge) xcc
- lenovo se455 v3 (thinkedge) xcc
- lenovo sn550 (thinksystem) xcc
- lenovo sn550 v2 (thinksystem) xcc
- lenovo sn850 (thinksystem) xcc
- lenovo sr150 (thinksystem) xcc
- lenovo sr158 (thinksystem) xcc
- lenovo sr250 (thinksystem) xcc
- lenovo sr250 v2 (thinksystem) xcc
- lenovo sr250 v3 (thinksystem) xcc
- lenovo sr258 (thinksystem) xcc
- lenovo sr258 v2 (thinksystem) xcc
- lenovo sr258 v3 (thinksystem) xcc
- lenovo sr530 (thinksystem) xcc
- lenovo sr550 (thinksystem) xcc
- lenovo sr570 (thinksystem) xcc
- lenovo sr590 (thinksystem) xcc
- lenovo sr630 (thinksystem) xcc
- lenovo sr630 v2 (thinksystem) xcc
- lenovo sr630 v3 (thinksystem) xcc
- lenovo sr635 v3 (thinksystem) xcc
- lenovo sr645 (thinksystem) xcc
- lenovo sr645 v3 (thinksystem) xcc
- lenovo sr650 (thinksystem) xcc
- lenovo sr650 v2 (thinksystem) xcc
- lenovo sr650 v3 (thinksystem) xcc
- lenovo sr655 v3 (thinksystem) xcc
- lenovo sr665 (thinksystem) xcc
- lenovo sr665 v3 (thinksystem) xcc
- lenovo sr670 (thinksystem) xcc
- lenovo sr670 v2 (thinksystem) xcc
- lenovo sr675 v3 (thinksystem) xcc
- lenovo sr850 (thinksystem) xcc
- lenovo sr850 v2 (thinksystem) xcc
- lenovo sr850 v3 (thinksystem) xcc
- lenovo sr850p (thinksystem) xcc
- lenovo sr860 (thinksystem) xcc
- lenovo sr860 v2 (thinksystem) xcc
- lenovo sr860 v3 (thinksystem) xcc
- lenovo sr950 (thinksystem) xcc
- lenovo sr950 v3 (thinksystem) xcc
- lenovo st250 (thinksystem) xcc
- lenovo st250 v2 (thinksystem) xcc
- lenovo st250 v3 (thinksystem) xcc
- lenovo st258 (thinksystem) xcc
- lenovo st258 v2 (thinksystem) xcc
- lenovo st258 v3 (thinksystem) xcc
- lenovo st550 (thinksystem) xcc
- lenovo st650 v2 (thinksystem) xcc
- lenovo st650 v3 (thinksystem) xcc
- lenovo st658 v2 (thinksystem) xcc
- lenovo st658 v3 (thinksystem) xcc
- lenovo thinkagile mx1021 on se350 xcc
- lenovo vx 1se certified node (thinkagile) xcc
- lenovo vx 2u4n certified node (thinkagile) xcc
- lenovo vx 4u certified node (thinkagile) xcc
- lenovo vx1320 (thinkagile) xcc
- lenovo vx2320 (thinkagile) xcc
- lenovo vx2330 appliance (thinkagile) xcc
- lenovo vx3320 (thinkagile) xcc
- lenovo vx3330 appliance (thinkagile) xcc
- lenovo vx3331 certified node (thinkagile) xcc
- lenovo vx3520-g (thinkagile) xcc
- lenovo vx3530-g appliance (thinkagile) xcc
- lenovo vx3720 (thinkagile) xcc
- lenovo vx5520 (thinkagile) xcc
- lenovo vx5530 appliance (thinkagile) xcc
- lenovo vx635 v3 integrated system (thinkagile) xcc
- lenovo vx645 v3 certified node (thinkagile) xcc
- lenovo vx645 v3 integrated system (thinkagile) xcc
- lenovo vx655 v3 certified node (thinkagile) xcc
- lenovo vx655 v3 integrated system (thinkagile) xcc
- lenovo vx665 v3 certified node (thinkagile) xcc
- lenovo vx665 v3 integrated system (thinkagile) xcc
- lenovo vx7320 n (thinkagile) xcc
- lenovo vx7330 appliance (thinkagile) xcc
- lenovo vx7520 (thinkagile) xcc
- lenovo vx7520 n (thinkagile) xcc
- lenovo vx7530 appliance (thinkagile) xcc
- lenovo vx7531 certified node (thinkagile) xcc
- lenovo vx7820 (thinkagile) xcc
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-8059 is a medium vulnerability (CVSS 4.3) in Lenovo Hx Enclosure Certified Node (thinkagile) Xcc, published September 13, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.19%, the 9th percentile. No source names a fixed version.