CVE-2019-6182

CWE-12363 documents3 sources
Severity
4.9MEDIUM
EPSS
0.2%
top 55.68%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Lenovo Xclarity Administrator (lxca)Lenovo Xclarity Administrator
Timeline
PublishedSep 3
Latest updateMay 24

Description

A stored CSV Injection vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow an administrative user to store malformed data in LXCA Jobs and Event Log data, that could result in crafted formulas stored in an exported CSV file. The crafted formula is not executed on LXCA itself.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:NExploitability: 1.2 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5lenovo/xclarity_administrator_(lxca)unspecified — 2.5.0

🔴Vulnerability Details

2
GHSA
GHSA-3v5g-248q-q8gh: A stored CSV Injection vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2↗2022-05-24
▶
CVEList
CVE-2019-6182: A stored CSV Injection vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2↗2019-09-03
▶