CVE-2019-6194: XEE
Published Feb 14, 2020
·Updated
An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.6.6 that could allow information disclosure.
Affected Software
1 affected component
Lenovo XClarity Administrator<2.6.6
Remediation
Information
Update your LXCA installation to version 2.6.6 or later. Installation note: You will need to update to LXCA 2.6.0 before installing the latest fix bundle (v 2.6.6).
Event History
Feb 14, 2020
CVE Published
via MITRE·05:10 PM
Data Sourced
via MITRE·05:10 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2019-6194?
CVE-2019-6194 is an XML External Entity (XXE) processing vulnerability in Lenovo XClarity Administrator (LXCA) versions prior to 2.6.6.
2
How severe is CVE-2019-6194?
CVE-2019-6194 has a severity keyword of medium and a severity value of 5.5.
3
How can CVE-2019-6194 affect Lenovo XClarity Administrator?
CVE-2019-6194 can allow information disclosure in Lenovo XClarity Administrator (LXCA) versions prior to 2.6.6.
4
How can I fix CVE-2019-6194?
To fix CVE-2019-6194, update Lenovo XClarity Administrator (LXCA) to version 2.6.6 or later.
5
Where can I find more information about CVE-2019-6194?
You can find more information about CVE-2019-6194 on the Lenovo Product Security website.