CVE-2019-6195

MEDIUM

4.8

CVSS Score

Published: February 14, 2020 at 05:10 PM UTC

Updated: June 17, 2026 at 02:38 AM UTC

33 products affected across 1 vendorXClarity ControllerThinkSystem SR250ThinkSystem SR630

Using XClarity Controller (XCC) by Lenovo?

Get instant alerts when new vulnerabilities affect XClarity Controller (XCC) - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM4.8

Exploit prediction

EPSS 0.6%

Description

An authorization bypass exists in Lenovo XClarity Controller (XCC) versions prior to 3.08 CDI340V, 3.01 TEI392O, 1.71 PSI328N where a valid authenticated user with lesser privileges may be granted read-only access to higher-privileged information if 1) “LDAP Authentication Only with Local Authorization” mode is configured and used by XCC, and 2) a lesser privileged user logs into XCC within 1 minute of a higher privileged user logging out. The authorization bypass does not exist when “Local Authentication and Authorization” or “LDAP Authentication and Authorization” modes are configured and used by XCC.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

XClarity Controller · Lenovo

95%

v < 1.71 PSI328Nv < 1.71_psi328nv < 3.01 TEI392Ov < 3.01_tei392ov < 3.08 CDI340Vv < 3.08_cdi340v

Affected range stops below 1.71_psi328n, so it looks safe — our inference, not a vendor statement

Affected range stops below 3.01_tei392o, so it looks safe — our inference, not a vendor statement

Affected range stops below 3.08_cdi340v, so it looks safe — our inference, not a vendor statement

lenovo-thinkagile-hx-1000 (environment) · lenovo-thinkagile-hx-2000 (environment) · lenovo-thinkagile-hx-3000 (environment) · lenovo-thinkagile-hx-5000 (environment) · lenovo-thinkagile-hx-7000 (environment) · lenovo-thinkagile-mx-sr650 (environment) · lenovo-thinkagile-vx-1000 (environment) · lenovo-thinkagile-vx-2000 (environment) · lenovo-thinkagile-vx-3000 (environment) · lenovo-thinkagile-vx-5000 (environment) · lenovo-thinkagile-vx-7000 (environment) · lenovo-thinksystem-sd530 (environment) · lenovo-thinksystem-sd650-dwc (environment) · lenovo-thinksystem-sn550 (environment) · lenovo-thinksystem-sn850 (environment) · lenovo-thinksystem-sr150 (environment) · lenovo-thinksystem-sr158 (environment) · lenovo-thinksystem-sr250 (environment) · lenovo-thinksystem-sr258 (environment) · lenovo-thinksystem-sr530 (environment) · lenovo-thinksystem-sr550 (environment) · lenovo-thinksystem-sr570 (environment) · lenovo-thinksystem-sr590 (environment) · lenovo-thinksystem-sr630 (environment) · lenovo-thinksystem-sr650 (environment) · lenovo-thinksystem-sr850 (environment) · lenovo-thinksystem-sr860 (environment) · lenovo-thinksystem-sr950-server (environment) · lenovo-thinksystem-st250 (environment) · lenovo-thinksystem-st258 (environment) · lenovo-thinksystem-st550 (environment) · lenovo-thinksystem-st558 (environment)

Thinkagile Hx 1000 · Lenovodevice

80%

All versions

Thinkagile Hx 2000 · Lenovodevice

80%

All versions

Thinkagile Hx 3000 · Lenovodevice

80%

All versions

Thinkagile Hx 5000 · Lenovodevice

80%

All versions