CVE-2017-3743

If multiple users are concurrently logged into a single system where one user is sending a command via the Lenovo ToolsCenter Advanced Settings Utility (ASU)…

published June 20, 2017

CVSS
—
EPSS
1%
Percentile
53.4
In the wild
Unconfirmed
What it is

If multiple users are concurrently logged into a single system where one user is sending a command via the Lenovo ToolsCenter Advanced Settings Utility (ASU), UpdateXpress System Pack Installer (UXSPI) or Dynamic System Analysis (DSA) to a second machine, the other users may be able to see the user ID and clear text password that were used to access the second machine during the time the command is processing.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00728 · 53.4th percentile
Published
2017-06-20T00:00Z
EPSS history
Timeline
  • 20 JUN 00:00Z
    If multiple users are concurrently logged into a single system where one user is sending a command via the Lenovo ToolsCenter Advanced Settings Utility (ASU)…
    cvelistv5