Approved changes feed: RSS · Atom

cpe:2.3:a:lenovo:xclarity_administrator:2.6.0:*:*:*:*:*:*:*

part: a version: 2.6.0 update: *

VendorLenovo (c98ed681-bc65-5c44-8bbb-e0a228f96d0e)
ProductXclarity Administrator (115833de-9fac-5c78-9f07-103ae6f1f448)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-19756 vulnerable 2026-06-08 05:13:23.535802 Details available
HIGH (7.9)
An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered Windows OS credentials, used to perform driver updates of managed systems, being written to a log file in clear text. This only affects LXCA version 2.6.0 when performing a Windows driver update. Affected logs are only accessible to authorized users in the First Failure Data Capture (FFDC) service log and log files on LXCA.
Published: 2020-03-13T15:40:14.275Z
Updated: 2024-09-16T16:32:57.281Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.