CVE-2019-6182: Medium severity lenovo xclarity administrator vulnerability
Published Sep 3, 2019
·Updated
A stored CSV Injection vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow an administrative user to store malformed data in LXCA Jobs and Event Log data, that could result in crafted formulas stored in an exported CSV file. The crafted formula is not executed on LXCA itself.
Affected Software
1 affected component
Lenovo XClarity Administrator<2.5.0
Remediation
Information
Update your LXCA installation to version 2.5.0 or later.
Event History
Sep 3, 2019
CVE Published
via MITRE·06:50 PM
Data Sourced
via MITRE·06:50 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this Lenovo XClarity Administrator vulnerability?
The vulnerability ID for this Lenovo XClarity Administrator vulnerability is CVE-2019-6182.
2
What is the severity of CVE-2019-6182?
The severity of CVE-2019-6182 is medium with a severity value of 4.9.
3
Which versions of Lenovo XClarity Administrator are affected by CVE-2019-6182?
Lenovo XClarity Administrator versions prior to 2.5.0 are affected by CVE-2019-6182.
4
What is the CWE number for this vulnerability?
The CWE number for this vulnerability is 1236.
5
How can I fix the CVE-2019-6182 vulnerability?
To fix the CVE-2019-6182 vulnerability, update Lenovo XClarity Administrator to version 2.5.0 or later.