QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2019-6182

Back to search

CVE-2019-6182

Published: Sep 3, 2019

Modified: Sep 17, 2024

PUBLISHED

CVSS v3.0

4.8

MEDIUM

Description

A stored CSV Injection vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow an administrative user to store malformed data in LXCA Jobs and Event Log data, that could result in crafted formulas stored in an exported CSV file. The crafted formula is not executed on LXCA itself.

VendorProductVersions

Lenovo

XClarity Administrator (LXCA)

affected
unspecified - < 2.5.0

CVSS v3.0 Details

CVSS v3.0 Vector

CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now