VYPR
← All advisories
High severity7.9NVD Advisory· Published Mar 13, 2020· Updated Jun 17, 2026

CVE-2019-19756

CVE-2019-19756

Description

An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered Windows OS credentials, used to perform driver updates of managed systems, being written to a log file in clear text. This only affects LXCA version 2.6.0 when performing a Windows driver update. Affected logs are only accessible to authorized users in the First Failure Data Capture (FFDC) service log and log files on LXCA.

Affected products

3
  • Lenovo/Xclarity Administrator3 versions
    cpe:2.3:a:lenovo:xclarity_administrator:2.6.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:lenovo:xclarity_administrator:2.6.0:*:*:*:*:*:*:*
    • (no CPE)range: =2.6.0
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.