An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered Windows OS credentials, used to perform driver updates of managed systems, being written to a log file in clear text. This only affects LXCA version 2.6.0 when performing a Windows driver update. Affected logs are only accessible to authorized users in the First Failure Data Capture (FFDC) service log and log files on LXCA.
References
Link | Resource |
---|---|
https://support.lenovo.com/us/en/product_security/LEN-29942 | Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: lenovo
Published: 2020-03-13T00:00:00
Updated: 2020-03-13T15:40:14
Reserved: 2019-12-12T00:00:00
Link: CVE-2019-19756
JSON object: View
NVD Information
Status : Analyzed
Published: 2020-03-13T16:15:11.970
Modified: 2021-11-02T19:16:30.403
Link: CVE-2019-19756
JSON object: View
Redhat Information
No data.
CWE