CVE-2019-6193CWE-284

An information disclosure vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.6.6 that could allow unauthenticated access to…

High · published February 14, 2020

CVSS v3.1
7.5
EPSS
1%
Percentile
63.4
In the wild
Unconfirmed
What it is

An information disclosure vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.6.6 that could allow unauthenticated access to some configuration files which may contain usernames, license keys, IP addresses, and encrypted password hashes.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01033 · 63.4th percentile
Weakness
CWE-284 · Improper Access Control
Published
2020-02-14T17:10Z
EPSS history
Timeline
  • 14 FEB 17:10Z
    An information disclosure vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.6.6 that could allow unauthenticated access to…
    cvelistv5