CVE-2019-6179: XEE
First published: Tue Sep 03 2019(Updated: )
An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) prior to version 2.5.0 , Lenovo XClarity Integrator (LXCI) for Microsoft System Center prior to version 7.7.0, and Lenovo XClarity Integrator (LXCI) for VMWare vCenter prior to version 6.1.0 that could allow information disclosure.
Credit: psirt@lenovo.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Lenovo XClarity Administrator | <2.5.0 | |
| Lenovo Xclarity Integrator | <6.1.0 | |
| Lenovo Xclarity Integrator | <7.7.0 |
Remedy
Update your LXCA installation to version 2.5.0 or later. Update LXCI for Microsoft System Center to version 7.7.0 or later. Update LXCI for VMware vCenter to version 6.1.0 or later.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-6179?
CVE-2019-6179 is an XML External Entity (XXE) processing vulnerability reported in Lenovo XClarity Administrator (LXCA) prior to version 2.5.0, Lenovo XClarity Integrator (LXCI) for Microsoft System Center prior to version 7.7.0, and Lenovo XClarity Integrator (LXCI) for VMWare vCenter prior to version 6.1.0.
How severe is the CVE-2019-6179 vulnerability?
The severity of the CVE-2019-6179 vulnerability is rated as high with a CVSS score of 7.5.
Which software versions are affected by CVE-2019-6179?
Lenovo XClarity Administrator prior to version 2.5.0, Lenovo XClarity Integrator for Microsoft System Center prior to version 7.7.0, and Lenovo XClarity Integrator for VMWare vCenter prior to version 6.1.0 are affected by CVE-2019-6179.
How can I fix the CVE-2019-6179 vulnerability?
Update Lenovo XClarity Administrator to version 2.5.0, Lenovo XClarity Integrator for Microsoft System Center to version 7.7.0, and Lenovo XClarity Integrator for VMWare vCenter to version 6.1.0 to fix the CVE-2019-6179 vulnerability.
Where can I find more information about CVE-2019-6179?
You can find more information about CVE-2019-6179 on the Lenovo support website at https://support.lenovo.com/solutions/LEN-27805.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/last-modified-date
- agent/severity
- agent/references
- agent/weakness
- agent/remedy
- agent/description
- agent/tags
- agent/event
- agent/first-publish-date
- vendor/lenovo
- canonical/lenovo xclarity administrator
- canonical/lenovo xclarity integrator