8.7
High
CVE-2019-6158 An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered HTTP proxy credentials being…
Description
An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered HTTP proxy credentials being written to a log file in clear text. This only affects LXCA when HTTP proxy credentials have been configured. This affects LXCA versions 2.0.0 to 2.3.x.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Lenovo XClarity Administrator 2.3 | earliest → < 2.3.x | 2.3.x |
Other CVEs of Lenovo XClarity Administrator
The 6 CVEs of Lenovo XClarity Administrator →
CVE-2023-34422
A valid, authenticated LXCA user with elevated privileges may be able to delete folders in the LXCA filesystem through a…
6.5
Medium
CVE-2023-34421
A valid, authenticated LXCA user with elevated privileges may be able to replace filesystem data through a…
6.5
Medium
CVE-2023-34420
A valid, authenticated LXCA user with elevated privileges may be able to execute command injections through crafted…
7.2
High
CVE-2023-34418
A valid, authenticated LXCA user may be able to gain unauthorized access to events and other data stored in LXCA due…
8.1
High