2 lines
3.4 KiB
JSON
2 lines
3.4 KiB
JSON
{"affected":[{"affectedData":[{"product":"Lenovo XClarity Administrator","vendor":"Lenovo","versions":[{"lessThan":"2.3.x","status":"affected","version":"unspecified","versionType":"custom"},{"lessThan":"2.0.0","status":"unaffected","version":"unspecified","versionType":"custom"}]}],"source":"psirt@lenovo.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:lenovo:xclarity_administrator:*:*:*:*:*:*:*:*","matchCriteriaId":"4B211388-3B47-4CC0-9836-DC859A2C5731","versionEndExcluding":"2.4.0","versionStartIncluding":"2.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered HTTP proxy credentials being written to a log file in clear text. This only affects LXCA when HTTP proxy credentials have been configured. This affects LXCA versions 2.0.0 to 2.3.x."},{"lang":"es","value":"Una auditoría interna de seguridad del producto de Lenovo XClarity Administrator (LXCA) descubrió que las credenciales de proxy HTTP se escribían en un archivo de registro en texto en claro. Esto sólo afecta a LXCA cuando se han configurado las credenciales de proxy HTTP. Las versiones desde 2.0.0 hasta la 2.3.x de LXCA se encuentran afectadas."}],"id":"CVE-2019-6158","lastModified":"2026-06-17T02:38:41.930","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"NONE","baseScore":4.3,"confidentialityImpact":"PARTIAL","integrityImpact":"NONE","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","version":"2.0"},"exploitabilityScore":8.6,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":8.7,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N","version":"3.0"},"exploitabilityScore":2.3,"impactScore":5.8,"source":"psirt@lenovo.com","type":"Secondary"},{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.0"},"exploitabilityScore":2.2,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2019-05-03T20:29:01.387","references":[{"source":"psirt@lenovo.com","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/108165"},{"source":"psirt@lenovo.com","tags":["Vendor Advisory"],"url":"https://support.lenovo.com/solutions/LEN-26141"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/108165"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://support.lenovo.com/solutions/LEN-26141"}],"sourceIdentifier":"psirt@lenovo.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-532"}],"source":"nvd@nist.gov","type":"Primary"}]}
|