CVE-2019-6158

CWE-532 — Log File Information Exposure3 documents3 sources
Severity
5.9MEDIUM
EPSS
0.3%
top 45.16%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Lenovo Lenovo Xclarity AdministratorLenovo Xclarity Administrator
Timeline
PublishedMay 3
Latest updateMay 24

Description

An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered HTTP proxy credentials being written to a log file in clear text. This only affects LXCA when HTTP proxy credentials have been configured. This affects LXCA versions 2.0.0 to 2.3.x.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:NExploitability: 2.3 | Impact: 5.8

Affected Packages2 packages

▶NVDlenovo/xclarity_administrator2.0.0 — 2.4.0
▶CVEListV5lenovo/lenovo_xclarity_administratorunspecified — 2.3.x

🔴Vulnerability Details

2
GHSA
GHSA-hq63-xwp9-jmr5: An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered HTTP proxy credentials being written to a log file in clear text↗2022-05-24
▶
CVEList
CVE-2019-6158: An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered HTTP proxy credentials being written to a log file in clear text↗2019-05-03
▶
CVE-2019-6158 (MEDIUM CVSS 5.9) | An internal product security audit | cvebase.io