ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2019-6157

—
CVSS 3.0
7.5 high
EPSS
1%p70
Published
()
Modified
Description

In various firmware versions of Lenovo System x, the integrated management module II (IMM2)'s first failure data capture (FFDC) includes the web server's private key in the generated log file for support.

Vendors
lenovoibm
Products
flex system x240 m4 firmware, flex system x240 m5 firmware, flex system x280 x6 firmware, flex system x440 m4 firmware, flex system x480 x6 firmware, flex system x880 firmware, nextscale nx360 m5 firmware, system x3250 m6 firmware, system x3500 m5 firmware, system x3550 m5 firmware, system x3650 m5 firmware, system x3750 m4 firmware
Weakness
CWE-532
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news

No ingested article mentions this CVE yet.