{"id":"CVE-2019-6157","state":"PUBLISHED","title":"In various firmware versions of Lenovo System x, the integrated management module II (IMM2)'s first failure data capture (FFDC) includes the web server's private key in the generat","description":"In various firmware versions of Lenovo System x, the integrated management module II (IMM2)'s first failure data capture (FFDC) includes the web server's private key in the generated log file for support.","publishedAt":"2019-04-22T15:21:29.692Z","updatedAt":"2024-09-17T00:06:19.158Z","severity":{"score":6.5,"label":"Medium","version":"3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N","source":"lenovo"},"assigner":"lenovo","products":["Lenovo System x"],"affected":[{"vendor":"Lenovo","product":"System x","versions":[{"version":"various","status":"affected"}]}],"references":["https://support.lenovo.com/solutions/LEN-25667"],"weaknesses":[],"ingestedAt":"2026-10-29T19:46:06.737Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2019/6xxx/CVE-2019-6157.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2019-6157","state":"PUBLISHED","datePublished":"2019-04-22T15:21:29.692Z","dateUpdated":"2024-09-17T00:06:19.158Z","assignerShortName":"lenovo","assignerOrgId":"da227ddf-6e25-4b41-b023-0f976dcaca4b","dateReserved":"2019-01-11T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"In various firmware versions of Lenovo System x, the integrated management module II (IMM2)'s first failure data capture (FFDC) includes the web server's private key in the generated log file for support."}],"affected":[{"vendor":"Lenovo","product":"System x","versions":[{"version":"various","status":"affected"}]}],"references":[{"url":"https://support.lenovo.com/solutions/LEN-25667","tags":["x_refsource_MISC"]}],"metrics":[{"cvssV3_0":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N","version":"3.0"}}],"problemTypes":[{"descriptions":[{"description":"Information disclosure","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"lenovo","dateUpdated":"2019-04-22T15:21:29.000Z","orgId":"da227ddf-6e25-4b41-b023-0f976dcaca4b"},"datePublic":"2019-04-18T00:00:00.000Z","source":{"advisory":"LEN-25667","discovery":"UNKNOWN"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@lenovo.com","DATE_PUBLIC":"2019-04-18T16:00:00.000Z","ID":"CVE-2019-6157","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"System x","version":{"version_data":[{"version_value":"various"}]}}]},"vendor_name":"Lenovo"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"In various firmware versions of Lenovo System x, the integrated management module II (IMM2)'s first failure data capture (FFDC) includes the web server's private key in the generated log file for support."}]},"impact":{"cvss":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N","version":"3.0"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Information disclosure"}]}]},"references":{"reference_data":[{"name":"https://support.lenovo.com/solutions/LEN-25667","refsource":"MISC","url":"https://support.lenovo.com/solutions/LEN-25667"}]},"source":{"advisory":"LEN-25667","discovery":"UNKNOWN"}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://support.lenovo.com/solutions/LEN-25667","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T20:16:24.517Z"}}]}}}