CVE-2019-6158

An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered HTTP proxy credentials being written to a log file in clear text

High · published May 3, 2019

CVSS v3.0
8.7
EPSS
1%
Percentile
73.6
In the wild
Unconfirmed
What it is

An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered HTTP proxy credentials being written to a log file in clear text. This only affects LXCA when HTTP proxy credentials have been configured. This affects LXCA versions 2.0.0 to 2.3.x.

The record
Technical detail
CVSS v3.0
8.7 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.01474 · 73.6th percentile
Published
2019-05-03T19:27Z
EPSS history
Timeline
  • 03 MAY 19:27Z
    An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered HTTP proxy credentials being written to a log file in clear text
    cvelistv5