1. Home
  2. CVE Database
  3. CVE-2019-6179
HIGH · 7.5

CVE-2019-6179

An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) prior to version 2.5.0 , Lenovo XClarity Integrator (LXCI) for Microsoft System Center prior ...

Vulnerability Description

An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) prior to version 2.5.0 , Lenovo XClarity Integrator (LXCI) for Microsoft System Center prior to version 7.7.0, and Lenovo XClarity Integrator (LXCI) for VMWare vCenter prior to version 6.1.0 that could allow information disclosure.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
LenovoXclarity Administrator< 2.5.0
LenovoXclarity Integrator< 6.1.0

Related Weaknesses (CWE)

CWE-611

References

FAQ

What is CVE-2019-6179?

CVE-2019-6179 is a vulnerability with a CVSS score of 7.5 (HIGH). An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) prior to version 2.5.0 , Lenovo XClarity Integrator (LXCI) for Microsoft System Center prior ...

How severe is CVE-2019-6179?

CVE-2019-6179 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-6179?

Check the references section above for vendor advisories and patch information. Affected products include: Lenovo Xclarity Administrator, Lenovo Xclarity Integrator.