VULNERABILITY INTELLIGENCE

CVE-2019-6193

CVSS score7.5 HIGH
EPSS probability1.03%
CISA KEVNot currently listed
Published2020-02-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

An information disclosure vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.6.6 that could allow unauthenticated access to some configuration files which may contain usernames, license keys, IP addresses, and encrypted password hashes.

Weakness classification

  • psirt@lenovo.com: CWE-284
  • nvd@nist.gov: CWE-200

Primary references