What is CVE-2019-6187?

CVE-2019-6187 is a medium-severity vulnerability in Lenovo Xclarity Controller (Xcc), classified under Improper Neutralization of Formula Elements in a CSV File. CVSS score: 6.5/10. Published 2019-11-20.

How severe is CVE-2019-6187?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Lenovo Xclarity Controller (Xcc)

CVE-2019-6187

A stored CSV Injection vulnerability was reported in Lenovo XClarity Controller (XCC) that could allow an administrative or other appropriately permissioned user to store malformed data in certain XCC server informational fields, that coul…

EPSS: 0.009 (54.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Lenovo Xclarity Controller (Xcc) — versions unspecified, unspecified, unspecified
Lenovo Thinkagile_7d1h
Lenovo Thinkagile_7x82
Lenovo Thinkagile_7x83
Lenovo Thinkagile_7y11
Lenovo Thinkagile_7y12
Lenovo Thinkagile_7y13
Lenovo Thinkagile_7y14
Lenovo Thinkagile_7y88
Lenovo Thinkagile_7y90

Weakness classification (CWE)

CWE-1236 — Improper Neutralization of Formula Elements in a CSV File

References

psirt@lenovo.com (Patch, x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2019-6187?: CVE-2019-6187 is a medium-severity vulnerability in Lenovo Xclarity Controller (Xcc), classified under Improper Neutralization of Formula Elements in a CSV File. CVSS score: 6.5/10. Published 2019-11-20.
How severe is CVE-2019-6187?: Medium severity. CVSS v3 base score is 6.5 out of 10.