CVE-2019-6179: XEE
An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) prior to version 2.5.0 , Lenovo XClarity Integrator (LXCI) for Microsoft System Center prior to version 7.7.0, and Lenovo XClarity Integrator (LXCI) for VMWare vCenter prior to version 6.1.0 that could allow information disclosure.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2019-6179?
CVE-2019-6179 is an XML External Entity (XXE) processing vulnerability reported in Lenovo XClarity Administrator (LXCA) prior to version 2.5.0, Lenovo XClarity Integrator (LXCI) for Microsoft System Center prior to version 7.7.0, and Lenovo XClarity Integrator (LXCI) for VMWare vCenter prior to version 6.1.0.
How severe is the CVE-2019-6179 vulnerability?
The severity of the CVE-2019-6179 vulnerability is rated as high with a CVSS score of 7.5.
Which software versions are affected by CVE-2019-6179?
Lenovo XClarity Administrator prior to version 2.5.0, Lenovo XClarity Integrator for Microsoft System Center prior to version 7.7.0, and Lenovo XClarity Integrator for VMWare vCenter prior to version 6.1.0 are affected by CVE-2019-6179.
How can I fix the CVE-2019-6179 vulnerability?
Update Lenovo XClarity Administrator to version 2.5.0, Lenovo XClarity Integrator for Microsoft System Center to version 7.7.0, and Lenovo XClarity Integrator for VMWare vCenter to version 6.1.0 to fix the CVE-2019-6179 vulnerability.
Where can I find more information about CVE-2019-6179?
You can find more information about CVE-2019-6179 on the Lenovo support website at https://support.lenovo.com/solutions/LEN-27805.