CVE-2019-6187

{"id": "CVE-2019-6187", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2019-11-20T02:15:10.787", "references": [{"url": "https://support.lenovo.com/solutions/LEN-29118", "tags": ["Patch", "Vendor Advisory"], "source": "psirt@lenovo.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-1236"}]}], "descriptions": [{"lang": "en", "value": "A stored CSV Injection vulnerability was reported in Lenovo XClarity Controller (XCC) that could allow an administrative or other appropriately permissioned user to store malformed data in certain XCC server informational fields, that could result in crafted formulas being stored in an exported CSV file. The crafted formula is not executed on XCC itself and has no effect on the server."}, {"lang": "es", "value": "Se report\u00f3 una vulnerabilidad de inyecci\u00f3n CSV almacenada en Lenovo XClarity Controller (XCC) lo que podr\u00eda permitir a un usuario administrativo u otro usuario con permiso apropiado almacenar datos malformados en determinados campos informativos del servidor de XCC, que podr\u00eda resultar en que las f\u00f3rmulas especialmente dise\u00f1adas sean almacenadas en un archivo CSV exportado. La f\u00f3rmula especialmente dise\u00f1ada no es ejecutada en XCC y no tiene ning\u00fan efecto en el servidor."}], "lastModified": "2020-08-24T17:37:01.140", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:lenovo:xclarity_controller:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2DEA7654-0593-4CEA-9040-078D4801C871", "versionEndExcluding": "tei392m"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkagile_7x82:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6C022FCB-ECB4-4E33-84E9-28E97AF1C21F"}, {"criteria": "cpe:2.3:h:lenovo:thinkagile_7y11:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3A1B8C35-DF16-4D29-AF9E-01339AC9BED4"}, {"criteria": "cpe:2.3:h:lenovo:thinkagile_7y12:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "99BA98D3-E3A9-49A0-9B0E-967B9126675B"}, {"criteria": "cpe:2.3:h:lenovo:thinkagile_7y88:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D51EBEBE-ADB7-48C3-9848-E3203333F2FE"}, {"criteria": "cpe:2.3:h:lenovo:thinkagile_7y92:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E914E260-382D-4CD0-BCE1-D960DAA30E05"}, {"criteria": "cpe:2.3:h:lenovo:thinkagile_7z03:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B8279AC5-03B1-44D6-8C9B-989F2C281641"}, {"criteria": "cpe:2.3:h:lenovo:thinksystem_sd530:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2588DA2E-6E58-4FA2-9AA6-FC669C042197"}, {"criteria": "cpe:2.3:h:lenovo:thinksystem_sd650:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7A1FF5D0-CC08-42B0-9798-55ED911B3EF6"}, {"criteria": "cpe:2.3:h:lenovo:thinksystem_sn550:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5DB64709-93BA-43D8-A1DB-4CE405291430"}, {"criteria": "cpe:2.3:h:lenovo:thinksystem_sn850:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1DB0C393-2CB4-485F-93E2-2F28B19F9325"}, {"criteria": "cpe:2.3:h:lenovo:thinksystem_sr150:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C6334030-07E4-45F4-A233-4A37F77FC573"}, {"criteria": "cpe:2.3:h:lenovo:thinksystem_sr158:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D94182EE-10FE-4506-BDE0-06F4140923FC"}, {"criteria": "cpe:2.3:h:lenovo:thinksystem_sr250:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C5B52AC1-714E-4217-8599-80D99E0D33B3"}, {"criteria": "cpe:2.3:h:lenovo:thinksystem_sr258:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "DB19D273-4975-4957-AE94-117B607CD746"}, {"criteria": "cpe:2.3:h:lenovo:thinksystem_sr850:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "19771143-D5F1-4F2F-AB83-09913894681E"}, {"criteria": "cpe:2.3:h:lenovo:thinksystem_sr860:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EAF08144-ECCB-477B-A934-E4578522BFEE"}, {"criteria": "cpe:2.3:h:lenovo:thinksystem_st250:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "DBF2350D-34B1-44DB-8E4A-6F29B37D96CF"}, {"criteria": "cpe:2.3:h:lenovo:thinksystem_st258:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "089F97B1-FEDE-4A5D-91D3-0517E8D39174"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:lenovo:xclarity_controller:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C03E8D97-6337-4E22-8125-8CED65281D5C", "versionEndExcluding": "cdi340m"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkagile_7d1h:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0BCA03A8-09C3-47A3-9715-D869B848771B"}, {"criteria": "cpe:2.3:h:lenovo:thinkagile_7x83:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D84E8645-BDEA-4DBD-972B-FFEEBD6EEA85"}, {"criteria": "cpe:2.3:h:lenovo:thinkagile_7y13:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B39D9ADA-4F3C-43A6-902F-E6626BC692F9"}, {"criteria": "cpe:2.3:h:lenovo:thinkagile_7y14:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7FB46A9B-16D9-4D4C-9BE1-813452C51C11"}, {"criteria": "cpe:2.3:h:lenovo:thinkagile_7y90:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "31DAB6CE-B360-489B-93DF-F98C4DE85DFE"}, {"criteria": "cpe:2.3:h:lenovo:thinkagile_7y93:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "634E0104-AD3D-48A3-B0E0-A74C15FAACC7"}, {"criteria": "cpe:2.3:h:lenovo:thinkagile_7y94:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B0B0F1CD-A017-4C20-AEB9-F80BA7FF304B"}, {"criteria": "cpe:2.3:h:lenovo:thinkagile_7z04:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "871F4EE6-3E47-499E-9650-47AB35EBBD9E"}, {"criteria": "cpe:2.3:h:lenovo:thinkagile_7z05:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "29D7C95C-F43D-4A1A-BD8B-5F40D8003477"}, {"criteria": "cpe:2.3:h:lenovo:thinkagile_7z06:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "792A1744-DFC1-420D-BFD5-60AE54DA54CC"}, {"criteria": "cpe:2.3:h:lenovo:thinkagile_7z07:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6F814B1C-E4E4-48BA-92C4-39B7997B51F4"}, {"criteria": "cpe:2.3:h:lenovo:thinkagile_7z20:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "40516AAC-4F19-4AE8-9C0B-0697D36FB0F9"}, {"criteria": "cpe:2.3:h:lenovo:thinkagile_yx84:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6876F1AA-3196-4576-B8F4-202266DA64EF"}, {"criteria": "cpe:2.3:h:lenovo:thinksystem_sr530:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F4C6628A-8A99-4841-A7C5-0445A03C638D"}, {"criteria": "cpe:2.3:h:lenovo:thinksystem_sr550:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D10850BF-A7EA-4B84-B2EF-66DCCC301514"}, {"criteria": "cpe:2.3:h:lenovo:thinksystem_sr570:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8A7C5BE3-5429-46B0-B0B5-C86A9B6376A7"}, {"criteria": "cpe:2.3:h:lenovo:thinksystem_sr590:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A3DC615C-A88A-4C45-892F-77C5E84104E8"}, {"criteria": "cpe:2.3:h:lenovo:thinksystem_sr630:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D7F10C8D-C9C7-4FAD-980D-7A602C8BE81D"}, {"criteria": "cpe:2.3:h:lenovo:thinksystem_sr650:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C6C2B5BB-6E1F-4E01-AAE8-A8239AB8945E"}, {"criteria": "cpe:2.3:h:lenovo:thinksystem_st550:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A5B19107-5B45-4E45-8B34-90B5A1FF3962"}, {"criteria": "cpe:2.3:h:lenovo:thinksystem_st558:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "30CFA6D5-7D07-4BFF-8AD2-DE591EDE0186"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:lenovo:xclarity_controller:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D93ED5C3-F8AF-4793-8CD5-2795EDE1CC04", "versionEndExcluding": "g1i312"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:_thinksystem_sr670:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "158A1ED4-96CD-4F8B-B607-6AC5AF12E057"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:lenovo:xclarity_controller:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AB970505-71D1-4802-8D9F-6D81A4024470", "versionEndExcluding": "psi328m"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinksystem_sr950:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B6B0407D-D603-48AE-9A42-F4C68056E19D"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@lenovo.com"}