{ "id": "CVE-2019-6187", "sourceIdentifier": "psirt@lenovo.com", "published": "2019-11-20T02:15:10.787", "lastModified": "2020-08-24T17:37:01.140", "vulnStatus": "Analyzed", "descriptions": [ { "lang": "en", "value": "A stored CSV Injection vulnerability was reported in Lenovo XClarity Controller (XCC) that could allow an administrative or other appropriately permissioned user to store malformed data in certain XCC server informational fields, that could result in crafted formulas being stored in an exported CSV file. The crafted formula is not executed on XCC itself and has no effect on the server." }, { "lang": "es", "value": "Se report\u00f3 una vulnerabilidad de inyecci\u00f3n CSV almacenada en Lenovo XClarity Controller (XCC) lo que podr\u00eda permitir a un usuario administrativo u otro usuario con permiso apropiado almacenar datos malformados en determinados campos informativos del servidor de XCC, que podr\u00eda resultar en que las f\u00f3rmulas especialmente dise\u00f1adas sean almacenadas en un archivo CSV exportado. La f\u00f3rmula especialmente dise\u00f1ada no es ejecutada en XCC y no tiene ning\u00fan efecto en el servidor." } ], "metrics": { "cvssMetricV31": [ { "source": "nvd@nist.gov", "type": "Primary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM" }, "exploitabilityScore": 2.8, "impactScore": 3.6 } ], "cvssMetricV2": [ { "source": "nvd@nist.gov", "type": "Primary", "cvssData": { "version": "2.0", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "SINGLE", "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseScore": 4.0 }, "baseSeverity": "MEDIUM", "exploitabilityScore": 8.0, "impactScore": 2.9, "acInsufInfo": false, "obtainAllPrivilege": false, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false } ] }, "weaknesses": [ { "source": "nvd@nist.gov", "type": "Primary", "description": [ { "lang": "en", "value": "CWE-1236" } ] } ], "configurations": [ { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:a:lenovo:xclarity_controller:*:*:*:*:*:*:*:*", "versionEndExcluding": "tei392m", "matchCriteriaId": "2DEA7654-0593-4CEA-9040-078D4801C871" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinkagile_7x82:-:*:*:*:*:*:*:*", "matchCriteriaId": "6C022FCB-ECB4-4E33-84E9-28E97AF1C21F" }, { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinkagile_7y11:-:*:*:*:*:*:*:*", "matchCriteriaId": "3A1B8C35-DF16-4D29-AF9E-01339AC9BED4" }, { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinkagile_7y12:-:*:*:*:*:*:*:*", "matchCriteriaId": "99BA98D3-E3A9-49A0-9B0E-967B9126675B" }, { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinkagile_7y88:-:*:*:*:*:*:*:*", "matchCriteriaId": "D51EBEBE-ADB7-48C3-9848-E3203333F2FE" }, { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinkagile_7y92:-:*:*:*:*:*:*:*", "matchCriteriaId": "E914E260-382D-4CD0-BCE1-D960DAA30E05" }, { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinkagile_7z03:-:*:*:*:*:*:*:*", "matchCriteriaId": "B8279AC5-03B1-44D6-8C9B-989F2C281641" }, { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinksystem_sd530:-:*:*:*:*:*:*:*", "matchCriteriaId": "2588DA2E-6E58-4FA2-9AA6-FC669C042197" }, { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinksystem_sd650:-:*:*:*:*:*:*:*", "matchCriteriaId": "7A1FF5D0-CC08-42B0-9798-55ED911B3EF6" }, { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinksystem_sn550:-:*:*:*:*:*:*:*", "matchCriteriaId": "5DB64709-93BA-43D8-A1DB-4CE405291430" }, { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinksystem_sn850:-:*:*:*:*:*:*:*", "matchCriteriaId": "1DB0C393-2CB4-485F-93E2-2F28B19F9325" }, { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinksystem_sr150:-:*:*:*:*:*:*:*", "matchCriteriaId": "C6334030-07E4-45F4-A233-4A37F77FC573" }, { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinksystem_sr158:-:*:*:*:*:*:*:*", "matchCriteriaId": "D94182EE-10FE-4506-BDE0-06F4140923FC" }, { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinksystem_sr250:-:*:*:*:*:*:*:*", "matchCriteriaId": "C5B52AC1-714E-4217-8599-80D99E0D33B3" }, { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinksystem_sr258:-:*:*:*:*:*:*:*", "matchCriteriaId": "DB19D273-4975-4957-AE94-117B607CD746" }, { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinksystem_sr850:-:*:*:*:*:*:*:*", "matchCriteriaId": "19771143-D5F1-4F2F-AB83-09913894681E" }, { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinksystem_sr860:-:*:*:*:*:*:*:*", "matchCriteriaId": "EAF08144-ECCB-477B-A934-E4578522BFEE" }, { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinksystem_st250:-:*:*:*:*:*:*:*", "matchCriteriaId": "DBF2350D-34B1-44DB-8E4A-6F29B37D96CF" }, { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinksystem_st258:-:*:*:*:*:*:*:*", "matchCriteriaId": "089F97B1-FEDE-4A5D-91D3-0517E8D39174" } ] } ] }, { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:a:lenovo:xclarity_controller:*:*:*:*:*:*:*:*", "versionEndExcluding": "cdi340m", "matchCriteriaId": "C03E8D97-6337-4E22-8125-8CED65281D5C" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinkagile_7d1h:-:*:*:*:*:*:*:*", "matchCriteriaId": "0BCA03A8-09C3-47A3-9715-D869B848771B" }, { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinkagile_7x83:-:*:*:*:*:*:*:*", "matchCriteriaId": "D84E8645-BDEA-4DBD-972B-FFEEBD6EEA85" }, { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinkagile_7y13:-:*:*:*:*:*:*:*", "matchCriteriaId": "B39D9ADA-4F3C-43A6-902F-E6626BC692F9" }, { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinkagile_7y14:-:*:*:*:*:*:*:*", "matchCriteriaId": "7FB46A9B-16D9-4D4C-9BE1-813452C51C11" }, { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinkagile_7y90:-:*:*:*:*:*:*:*", "matchCriteriaId": "31DAB6CE-B360-489B-93DF-F98C4DE85DFE" }, { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinkagile_7y93:-:*:*:*:*:*:*:*", "matchCriteriaId": "634E0104-AD3D-48A3-B0E0-A74C15FAACC7" }, { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinkagile_7y94:-:*:*:*:*:*:*:*", "matchCriteriaId": "B0B0F1CD-A017-4C20-AEB9-F80BA7FF304B" }, { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinkagile_7z04:-:*:*:*:*:*:*:*", "matchCriteriaId": "871F4EE6-3E47-499E-9650-47AB35EBBD9E" }, { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinkagile_7z05:-:*:*:*:*:*:*:*", "matchCriteriaId": "29D7C95C-F43D-4A1A-BD8B-5F40D8003477" }, { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinkagile_7z06:-:*:*:*:*:*:*:*", "matchCriteriaId": "792A1744-DFC1-420D-BFD5-60AE54DA54CC" }, { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinkagile_7z07:-:*:*:*:*:*:*:*", "matchCriteriaId": "6F814B1C-E4E4-48BA-92C4-39B7997B51F4" }, { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinkagile_7z20:-:*:*:*:*:*:*:*", "matchCriteriaId": "40516AAC-4F19-4AE8-9C0B-0697D36FB0F9" }, { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinkagile_yx84:-:*:*:*:*:*:*:*", "matchCriteriaId": "6876F1AA-3196-4576-B8F4-202266DA64EF" }, { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinksystem_sr530:-:*:*:*:*:*:*:*", "matchCriteriaId": "F4C6628A-8A99-4841-A7C5-0445A03C638D" }, { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinksystem_sr550:-:*:*:*:*:*:*:*", "matchCriteriaId": "D10850BF-A7EA-4B84-B2EF-66DCCC301514" }, { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinksystem_sr570:-:*:*:*:*:*:*:*", "matchCriteriaId": "8A7C5BE3-5429-46B0-B0B5-C86A9B6376A7" }, { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinksystem_sr590:-:*:*:*:*:*:*:*", "matchCriteriaId": "A3DC615C-A88A-4C45-892F-77C5E84104E8" }, { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinksystem_sr630:-:*:*:*:*:*:*:*", "matchCriteriaId": "D7F10C8D-C9C7-4FAD-980D-7A602C8BE81D" }, { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinksystem_sr650:-:*:*:*:*:*:*:*", "matchCriteriaId": "C6C2B5BB-6E1F-4E01-AAE8-A8239AB8945E" }, { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinksystem_st550:-:*:*:*:*:*:*:*", "matchCriteriaId": "A5B19107-5B45-4E45-8B34-90B5A1FF3962" }, { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinksystem_st558:-:*:*:*:*:*:*:*", "matchCriteriaId": "30CFA6D5-7D07-4BFF-8AD2-DE591EDE0186" } ] } ] }, { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:a:lenovo:xclarity_controller:*:*:*:*:*:*:*:*", "versionEndExcluding": "g1i312", "matchCriteriaId": "D93ED5C3-F8AF-4793-8CD5-2795EDE1CC04" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:_thinksystem_sr670:-:*:*:*:*:*:*:*", "matchCriteriaId": "158A1ED4-96CD-4F8B-B607-6AC5AF12E057" } ] } ] }, { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:a:lenovo:xclarity_controller:*:*:*:*:*:*:*:*", "versionEndExcluding": "psi328m", "matchCriteriaId": "AB970505-71D1-4802-8D9F-6D81A4024470" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinksystem_sr950:-:*:*:*:*:*:*:*", "matchCriteriaId": "B6B0407D-D603-48AE-9A42-F4C68056E19D" } ] } ] } ], "references": [ { "url": "https://support.lenovo.com/solutions/LEN-29118", "source": "psirt@lenovo.com", "tags": [ "Patch", "Vendor Advisory" ] } ] }