CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-6195

An authorization bypass exists in Lenovo XClarity Controller (XCC) versions prior to 3.08 CDI340V, 3.01 TEI392O, 1.71 PSI328N where a valid authenticated user with lesser privileges may be granted read-only access to higher-privileged information if 1) “LDAP Authentication Only with Local Authorization” mode is configured and used by XCC, and 2) a lesser privileged user logs into XCC within 1 minute of a higher privileged user logging out. The authorization bypass does not exist when “Local Authentication and Authorization” or “LDAP Authentication and Authorization” modes are configured and used by XCC.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 45.3%

CVSS Severity

CVSS v3 Score 4.8

CVSS v2 Score 2.1

References

Products affected by CVE-2019-6195

Lenovo » Xclarity Controller » Version: N/A

cpe:2.3:a:lenovo:xclarity_controller:-
Lenovo » Xclarity Controller » Version: 1.10_tgbt12q

cpe:2.3:a:lenovo:xclarity_controller:1.10_tgbt12q
Lenovo » Xclarity Controller » Version: 1.51_tgbt24l

cpe:2.3:a:lenovo:xclarity_controller:1.51_tgbt24l
Lenovo » Xclarity Controller » Version: 1.71_psi328n

cpe:2.3:a:lenovo:xclarity_controller:1.71_psi328n
Lenovo » Xclarity Controller » Version: 2.14_psi338i

cpe:2.3:a:lenovo:xclarity_controller:2.14_psi338i
Lenovo » Xclarity Controller » Version: 2.32_psi342n

cpe:2.3:a:lenovo:xclarity_controller:2.32_psi342n
Lenovo » Xclarity Controller » Version: 3.01_tei392o

cpe:2.3:a:lenovo:xclarity_controller:3.01_tei392o
Lenovo » Thinkagile Hx 1000 » Version: N/A

cpe:2.3:h:lenovo:thinkagile_hx_1000:-
Lenovo » Thinkagile Hx 2000 » Version: N/A

cpe:2.3:h:lenovo:thinkagile_hx_2000:-
Lenovo » Thinkagile Hx 3000 » Version: N/A

cpe:2.3:h:lenovo:thinkagile_hx_3000:-
Lenovo » Thinkagile Hx 5000 » Version: N/A

cpe:2.3:h:lenovo:thinkagile_hx_5000:-
Lenovo » Thinkagile Hx 7000 » Version: N/A

cpe:2.3:h:lenovo:thinkagile_hx_7000:-
Lenovo » Thinkagile Mx Sr650 » Version: N/A

cpe:2.3:h:lenovo:thinkagile_mx_sr650:-
Lenovo » Thinkagile Vx 1000 » Version: N/A

cpe:2.3:h:lenovo:thinkagile_vx_1000:-
Lenovo » Thinkagile Vx 2000 » Version: N/A

cpe:2.3:h:lenovo:thinkagile_vx_2000:-
Lenovo » Thinkagile Vx 3000 » Version: N/A

cpe:2.3:h:lenovo:thinkagile_vx_3000:-
Lenovo » Thinkagile Vx 5000 » Version: N/A

cpe:2.3:h:lenovo:thinkagile_vx_5000:-
Lenovo » Thinkagile Vx 7000 » Version: N/A

cpe:2.3:h:lenovo:thinkagile_vx_7000:-
Lenovo » Thinksystem Sd530 » Version: N/A

cpe:2.3:h:lenovo:thinksystem_sd530:-
Lenovo » Thinksystem Sd650 Dwc » Version: N/A

cpe:2.3:h:lenovo:thinksystem_sd650_dwc:-
Lenovo » Thinksystem Sn550 » Version: N/A

cpe:2.3:h:lenovo:thinksystem_sn550:-
Lenovo » Thinksystem Sn850 » Version: N/A

cpe:2.3:h:lenovo:thinksystem_sn850:-
Lenovo » Thinksystem Sr150 » Version: N/A

cpe:2.3:h:lenovo:thinksystem_sr150:-
Lenovo » Thinksystem Sr158 » Version: N/A

cpe:2.3:h:lenovo:thinksystem_sr158:-
Lenovo » Thinksystem Sr250 » Version: N/A

cpe:2.3:h:lenovo:thinksystem_sr250:-
Lenovo » Thinksystem Sr258 » Version: N/A

cpe:2.3:h:lenovo:thinksystem_sr258:-
Lenovo » Thinksystem Sr530 » Version: N/A

cpe:2.3:h:lenovo:thinksystem_sr530:-
Lenovo » Thinksystem Sr550 » Version: N/A

cpe:2.3:h:lenovo:thinksystem_sr550:-
Lenovo » Thinksystem Sr570 » Version: N/A

cpe:2.3:h:lenovo:thinksystem_sr570:-
Lenovo » Thinksystem Sr590 » Version: N/A

cpe:2.3:h:lenovo:thinksystem_sr590:-
Lenovo » Thinksystem Sr630 » Version: N/A

cpe:2.3:h:lenovo:thinksystem_sr630:-
Lenovo » Thinksystem Sr650 » Version: N/A

cpe:2.3:h:lenovo:thinksystem_sr650:-
Lenovo » Thinksystem Sr850 » Version: N/A

cpe:2.3:h:lenovo:thinksystem_sr850:-
Lenovo » Thinksystem Sr860 » Version: N/A

cpe:2.3:h:lenovo:thinksystem_sr860:-
Lenovo » Thinksystem Sr950 Server » Version: N/A

cpe:2.3:h:lenovo:thinksystem_sr950_server:-
Lenovo » Thinksystem St250 » Version: N/A

cpe:2.3:h:lenovo:thinksystem_st250:-
Lenovo » Thinksystem St258 » Version: N/A

cpe:2.3:h:lenovo:thinksystem_st258:-
Lenovo » Thinksystem St550 » Version: N/A

cpe:2.3:h:lenovo:thinksystem_st550:-
Lenovo » Thinksystem St558 » Version: N/A

cpe:2.3:h:lenovo:thinksystem_st558:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-6195

Products

Pricing

Contact Us