CVE-2019-6194

Опубликовано: 14 фев. 2020

Источник: nvd

CVSS3: 5.7

CVSS3: 5.5

CVSS2: 4.3

EPSS Низкий

Описание

An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.6.6 that could allow information disclosure.

Ссылки

https://support.lenovo.com/us/en/product_security/LEN-29477
Vendor Advisory
https://support.lenovo.com/us/en/product_security/LEN-29477
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:lenovo:xclarity_administrator:*:*:*:*:*:*:*:*

Версия до 2.6.6 (исключая)

EPSS

Процентиль: 48%

0.00252

Низкий

5.7 Medium

CVSS3

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-611

Связанные уязвимости

GHSA-ccgr-hfcp-wj34

github

больше 3 лет назад

An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.6.6 that could allow information disclosure.

EPSS

Процентиль: 48%

0.00252

Низкий

5.7 Medium

CVSS3

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-611