XXE in Lenovo Xclarity_administrator
CVE-2019-6179
An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) prior to version 2.5.0 , Lenovo XClarity Integrator (LXCI) for Microsoft System Center prior to version 7.7.0, and Lenovo XClarity I…
Vulnerability class: XXE (XML External Entity)
EPSS: 0.014 (68.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Lenovo Xclarity_administrator
- Lenovo Xclarity Administrator (Lxca) — versions unspecified
- Lenovo Xclarity_integrator
- Lenovo Xclarity Integrator (Lxci) For Microsoft System Center — versions unspecified
- Lenovo Xclarity Integrator (Lxci) For Vmware Vcenter — versions unspecified
Weakness classification (CWE)
References
- psirt@lenovo.com (x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2019-6179?
- CVE-2019-6179 is a high-severity vulnerability in Lenovo Xclarity_administrator, classified under Improper Restriction of XML External Entity Reference (XXE). CVSS score: 7.5/10. Published 2019-09-03.
- How severe is CVE-2019-6179?
- High severity. CVSS v3 base score is 7.5 out of 10.