CVE-2020-8355

CVE-2020-8355 describes a vulnerability in Lenovo XClarity Administrator (LXCA) prior to version 3.1.0 where Windows OS credentials used for driver updates can be inadvertently captured in First Failure Data Capture (FFDC) service logs. This medium-severity vulnerability (CVSS 4.9) has a network attack vector and low attack complexity, but requires high privileges to trigger, potentially leading to a compromise of confidentiality if a privileged LXCA user generates and accesses the log during an update. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.