EUVD-2019-15754

Malware in sbrugna...

Design/Logic Flaw

A stored CSV Injection vulnerability was reported in Lenovo XClarity Controller XCC that could allow an administrative or other appropriately permissioned user to store malformed data in certain XCC server informational fields, that could result in crafted formulas being stored in an exported CSV...

PT-2019-18014

Name of the Vulnerable Software and Affected Versions Lenovo XClarity Controller XCC affected versions not specified Description A stored CSV Injection issue was reported that could allow an administrative or other appropriately permissioned user to store malformed data in certain XCC server...