High severity7.5NVD Advisory· Published Sep 26, 2019· Updated Jun 17, 2026
CVE-2019-6161
CVE-2019-6161
Description
An internal product security audit discovered a session handling vulnerability in the web interface of ThinkAgile CP-SB (Storage Block) BMC in firmware versions prior to 1908.M. This vulnerability allows session IDs to be reused, which could provide unauthorized access to the BMC under certain circumstances. This vulnerability does not affect ThinkSystem XCC, System x IMM2, or other BMCs.
Affected products
3- cpe:2.3:o:lenovo:cp_storage_block_firmware:*:*:*:*:*:*:*:*Range: <1908.m
<1908.M+ 1 more
- (no CPE)range: <1908.M
- (no CPE)range: unspecified
Patches
Vulnerability mechanics
References
1- support.lenovo.com/solutions/LEN-26957nvdVendor Advisory
News mentions
0No linked articles in our index yet.