5.3
Medium
CVE-2019-6179 An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) prior to…
Description
An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) prior to version 2.5.0 , Lenovo XClarity Integrator (LXCI) for Microsoft System Center prior to version 7.7.0, and Lenovo XClarity Integrator (LXCI) for VMWare vCenter prior to version 6.1.0 that could allow information disclosure.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| XClarity Administrator (LXCA) 2.5 | earliest → < 2.5.0 | 2.5.0 |
| XClarity Integrator (LXCI) for Microsoft System Center 7.7 | earliest → < 7.7.0 | 7.7.0 |
| XClarity Integrator (LXCI) for VMware vCenter 6.1 | earliest → < 6.1.0 | 6.1.0 |
Other CVEs of XClarity Administrator (LXCA)
The 8 CVEs of XClarity Administrator (LXCA) →
CVE-2019-19756
An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered Windows OS credentials, used to…
7.9
High
CVE-2019-6194
An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions…
5.7
Medium
CVE-2019-6193
An information disclosure vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.6.6…
7.5
High
CVE-2019-19757
An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered a Document Object Model (DOM)…
5.4
Medium