Medium severity6.5NVD Advisory· Published Apr 22, 2019· Updated Jun 17, 2026
CVE-2019-6157
CVE-2019-6157
Description
In various firmware versions of Lenovo System x, the integrated management module II (IMM2)'s first failure data capture (FFDC) includes the web server's private key in the generated log file for support.
Affected products
44- cpe:2.3:o:ibm:flex_system_x220_m4_firmware:*:*:*:*:*:*:*:*Range: <7.20
- cpe:2.3:o:ibm:flex_system_x222_m4_firmware:*:*:*:*:*:*:*:*Range: <7.20
- cpe:2.3:o:ibm:flex_system_x240_m4_firmware:*:*:*:*:*:*:*:*Range: <7.20
- cpe:2.3:o:ibm:flex_system_x280_m4_firmware:*:*:*:*:*:*:*:*Range: <7.20
- cpe:2.3:o:ibm:flex_system_x440_m4_firmware:*:*:*:*:*:*:*:*Range: <7.20
- cpe:2.3:o:ibm:flex_system_x480_m4_firmware:*:*:*:*:*:*:*:*Range: <7.20
- cpe:2.3:o:ibm:flex_system_x880_m4_firmware:*:*:*:*:*:*:*:*Range: <7.20
- cpe:2.3:o:ibm:idataplex_dx360_m4_firmware:*:*:*:*:*:*:*:*Range: <7.20
- cpe:2.3:o:ibm:idataplex_dx360_m4_water_cooled_firmware:*:*:*:*:*:*:*:*Range: <7.20
- cpe:2.3:o:ibm:nextscale_nx360_m4_firmware:*:*:*:*:*:*:*:*Range: <7.20
- cpe:2.3:o:ibm:system_x3650_m4_bd_firmware:*:*:*:*:*:*:*:*Range: <7.20
- cpe:2.3:o:ibm:system_x3650_m4_hd_firmware:*:*:*:*:*:*:*:*Range: <7.20
- cpe:2.3:o:lenovo:flex_system_x240_m4_firmware:*:*:*:*:*:*:*:*Range: <5.30
- cpe:2.3:o:lenovo:flex_system_x240_m5_firmware:*:*:*:*:*:*:*:*Range: <5.30
- cpe:2.3:o:lenovo:flex_system_x280_x6_firmware:*:*:*:*:*:*:*:*Range: <5.30
- cpe:2.3:o:lenovo:flex_system_x440_m4_firmware:*:*:*:*:*:*:*:*Range: <5.30
- cpe:2.3:o:lenovo:flex_system_x480_x6_firmware:*:*:*:*:*:*:*:*Range: <5.30
- cpe:2.3:o:lenovo:flex_system_x880_firmware:*:*:*:*:*:*:*:*Range: <5.30
- cpe:2.3:o:lenovo:nextscale_nx360_m5_firmware:*:*:*:*:*:*:*:*Range: <5.30
- cpe:2.3:o:lenovo:system_x3250_m6_firmware:*:*:*:*:*:*:*:*Range: <5.30
- cpe:2.3:o:lenovo:system_x3500_m5_firmware:*:*:*:*:*:*:*:*Range: <5.30
- cpe:2.3:o:lenovo:system_x3550_m5_firmware:*:*:*:*:*:*:*:*Range: <5.30
- cpe:2.3:o:lenovo:system_x3650_m5_firmware:*:*:*:*:*:*:*:*Range: <5.30
- cpe:2.3:o:lenovo:system_x3750_m4_firmware:*:*:*:*:*:*:*:*Range: <5.30
- cpe:2.3:o:lenovo:system_x3850_x6_firmware:*:*:*:*:*:*:*:*Range: <5.30
- cpe:2.3:o:lenovo:system_x3950_x6_firmware:*:*:*:*:*:*:*:*Range: <5.30
Patches
Vulnerability mechanics
References
1- support.lenovo.com/solutions/LEN-25667nvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.