8.7
Élevée
CVE-2019-6158 An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered HTTP proxy credentials being…
Description
An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered HTTP proxy credentials being written to a log file in clear text. This only affects LXCA when HTTP proxy credentials have been configured. This affects LXCA versions 2.0.0 to 2.3.x.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Lenovo XClarity Administrator 2.3 | premières → < 2.3.x | 2.3.x |
Autres CVE de Lenovo XClarity Administrator
Les 6 CVE de Lenovo XClarity Administrator →
CVE-2023-34422
A valid, authenticated LXCA user with elevated privileges may be able to delete folders in the LXCA filesystem through a…
6.5
Moyenne
CVE-2023-34421
A valid, authenticated LXCA user with elevated privileges may be able to replace filesystem data through a…
6.5
Moyenne
CVE-2023-34420
A valid, authenticated LXCA user with elevated privileges may be able to execute command injections through crafted…
7.2
Élevée
CVE-2023-34418
A valid, authenticated LXCA user may be able to gain unauthorized access to events and other data stored in LXCA due…
8.1
Élevée