Skip to content
OpenAdvisories
High · 8.7 CVE-2019-6158 EUVD-2019-15725GHSA-hq63-xwp9-jmr5

An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered HTTP proxy credentials being written to a log file in…

Published May 3, 2019 · Updated Sep 16, 2024 · Assigned by lenovo

Description

An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered HTTP proxy credentials being written to a log file in clear text. This only affects LXCA when HTTP proxy credentials have been configured. This affects LXCA versions 2.0.0 to 2.3.x.

Affected products

VendorProductAffectedFixed
Lenovo Lenovo XClarity Administrator unspecified – < 2.3.x 2.3.x

References