CVE-2019-6158: Insertion of Sensitive Information into Log File

An internal product security audit of Lenovo XClarity Administrator LXCA discovered HTTP proxy credentials being written to a log file in clear text. This only affects LXCA when HTTP proxy credentials have been configured. This affects LXCA versions 2.0.0 to 2.3.x...

PT-2019-17991

Name of the Vulnerable Software and Affected Versions Lenovo XClarity Administrator versions 2.0.0 through 2.3.x Description An internal product security audit discovered that HTTP proxy credentials are being written to a log file in clear text when HTTP proxy credentials have been configured...

XClarity Administrator (LXCA) Service Data May Include Proxy Credentials - US

Lenovo Security Advisory: LEN-26141 Potential Impact: Information disclosure Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6158 Summary Description: An internal product security audit of Lenovo XClarity Administrator LXCA discovered HTTP proxy credentials being written ...

CVE-2017-9271: Insertion of Sensitive Information into Log File

The commandline package update tool zypper writes HTTP proxy credentials into its logfile, allowing local attackers to gain access to proxies used...