Vulnerability Details CVE-2019-6157
In various firmware versions of Lenovo System x, the integrated management module II (IMM2)'s first failure data capture (FFDC) includes the web server's private key in the generated log file for support.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 52.9%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 5.0
Products affected by CVE-2019-6157
-
cpe:2.3:h:ibm:bladecenter_hs22:-
-
cpe:2.3:h:ibm:bladecenter_hs23:-
-
cpe:2.3:h:ibm:bladecenter_hs23e:-
-
cpe:2.3:h:ibm:flex_system_x220_m4:-
-
cpe:2.3:h:ibm:flex_system_x222_m4:-
-
cpe:2.3:h:ibm:flex_system_x240_m4:-
-
cpe:2.3:h:ibm:flex_system_x280_m4:-
-
cpe:2.3:h:ibm:flex_system_x440_m4:-
-
cpe:2.3:h:ibm:flex_system_x480_m4:-
-
cpe:2.3:h:ibm:flex_system_x880_m4:-
-
cpe:2.3:h:ibm:idataplex_dx360_m4:-
-
cpe:2.3:h:ibm:idataplex_dx360_m4_water_cooled:-
-
cpe:2.3:h:ibm:nextscale_nx360_m4:-
-
cpe:2.3:h:ibm:system_x3100_m4:-
-
cpe:2.3:h:ibm:system_x3100_m5:-
-
cpe:2.3:h:ibm:system_x3250_m4:-
-
cpe:2.3:h:ibm:system_x3250_m5:-
-
cpe:2.3:h:ibm:system_x3300_m4:-
-
cpe:2.3:h:ibm:system_x3500_m4:-
-
cpe:2.3:h:ibm:system_x3530_m4:-
-
cpe:2.3:h:ibm:system_x3550_m4:-
-
cpe:2.3:h:ibm:system_x3630_m4:-
-
cpe:2.3:h:ibm:system_x3650_m4:-
-
cpe:2.3:h:ibm:system_x3650_m4_bd:-
-
cpe:2.3:h:ibm:system_x3650_m4_hd:-
-
cpe:2.3:h:ibm:system_x3750_m4:-
-
cpe:2.3:h:ibm:system_x3850_x6:-
-
cpe:2.3:h:ibm:system_x3950_x6:-
-
cpe:2.3:h:lenovo:flex_system_x240_m4:-
-
cpe:2.3:h:lenovo:flex_system_x240_m5:-
-
cpe:2.3:h:lenovo:flex_system_x280_x6:-
-
cpe:2.3:h:lenovo:flex_system_x440_m4:-
-
cpe:2.3:h:lenovo:flex_system_x480_x6:-
-
cpe:2.3:h:lenovo:flex_system_x880:-
-
cpe:2.3:h:lenovo:nextscale_nx360_m5:-
-
cpe:2.3:h:lenovo:system_x3250_m6:-
-
cpe:2.3:h:lenovo:system_x3500_m5:-
-
cpe:2.3:h:lenovo:system_x3550_m5:-
-
cpe:2.3:h:lenovo:system_x3650_m5:-
-
cpe:2.3:h:lenovo:system_x3750_m4:-
-
cpe:2.3:h:lenovo:system_x3850_x6:-
-
cpe:2.3:h:lenovo:system_x3950_x6:-
-
cpe:2.3:o:ibm:bladecenter_hs22_firmware:-
-
cpe:2.3:o:ibm:bladecenter_hs22_firmware:6.4
-
cpe:2.3:o:ibm:bladecenter_hs22_firmware:6.80
-
cpe:2.3:o:ibm:bladecenter_hs23_firmware:-
-
cpe:2.3:o:ibm:bladecenter_hs23_firmware:3.0.0
-
cpe:2.3:o:ibm:bladecenter_hs23_firmware:6.4
-
cpe:2.3:o:ibm:bladecenter_hs23_firmware:6.80
-
cpe:2.3:o:ibm:bladecenter_hs23e_firmware:-
-
cpe:2.3:o:ibm:bladecenter_hs23e_firmware:6.4
-
cpe:2.3:o:ibm:bladecenter_hs23e_firmware:6.80
-
cpe:2.3:o:ibm:flex_system_x220_m4_firmware:-
-
cpe:2.3:o:ibm:flex_system_x220_m4_firmware:6.4
-
cpe:2.3:o:ibm:flex_system_x220_m4_firmware:6.80
-
cpe:2.3:o:ibm:flex_system_x222_m4_firmware:-
-
cpe:2.3:o:ibm:flex_system_x222_m4_firmware:6.4
-
cpe:2.3:o:ibm:flex_system_x222_m4_firmware:6.80
-
cpe:2.3:o:ibm:flex_system_x240_m4_firmware:-
-
cpe:2.3:o:ibm:flex_system_x240_m4_firmware:6.4
-
cpe:2.3:o:ibm:flex_system_x240_m4_firmware:6.80
-
cpe:2.3:o:ibm:flex_system_x280_m4_firmware:-
-
cpe:2.3:o:ibm:flex_system_x280_m4_firmware:6.4
-
cpe:2.3:o:ibm:flex_system_x280_m4_firmware:6.80
-
cpe:2.3:o:ibm:flex_system_x440_m4_firmware:-
-
cpe:2.3:o:ibm:flex_system_x440_m4_firmware:6.4
-
cpe:2.3:o:ibm:flex_system_x440_m4_firmware:6.80
-
cpe:2.3:o:ibm:flex_system_x480_m4_firmware:-
-
cpe:2.3:o:ibm:flex_system_x480_m4_firmware:6.4
-
cpe:2.3:o:ibm:flex_system_x480_m4_firmware:6.80
-
cpe:2.3:o:ibm:flex_system_x880_m4_firmware:-
-
cpe:2.3:o:ibm:flex_system_x880_m4_firmware:6.4
-
cpe:2.3:o:ibm:flex_system_x880_m4_firmware:6.80
-
cpe:2.3:o:ibm:idataplex_dx360_m4_firmware:-
-
cpe:2.3:o:ibm:idataplex_dx360_m4_firmware:6.4
-
cpe:2.3:o:ibm:idataplex_dx360_m4_firmware:6.80
-
cpe:2.3:o:ibm:idataplex_dx360_m4_water_cooled_firmware:-
-
cpe:2.3:o:ibm:idataplex_dx360_m4_water_cooled_firmware:6.4
-
cpe:2.3:o:ibm:idataplex_dx360_m4_water_cooled_firmware:6.80
-
cpe:2.3:o:ibm:nextscale_nx360_m4_firmware:-
-
cpe:2.3:o:ibm:nextscale_nx360_m4_firmware:6.4
-
cpe:2.3:o:ibm:nextscale_nx360_m4_firmware:6.80
-
cpe:2.3:o:ibm:system_x3100_m4_firmware:-
-
cpe:2.3:o:ibm:system_x3100_m4_firmware:6.4
-
cpe:2.3:o:ibm:system_x3100_m4_firmware:6.80
-
cpe:2.3:o:ibm:system_x3100_m5_firmware:-
-
cpe:2.3:o:ibm:system_x3100_m5_firmware:6.4
-
cpe:2.3:o:ibm:system_x3100_m5_firmware:6.80
-
cpe:2.3:o:ibm:system_x3250_m4_firmware:-
-
cpe:2.3:o:ibm:system_x3250_m4_firmware:6.4
-
cpe:2.3:o:ibm:system_x3250_m4_firmware:6.80
-
cpe:2.3:o:ibm:system_x3250_m5_firmware:-
-
cpe:2.3:o:ibm:system_x3250_m5_firmware:6.4
-
cpe:2.3:o:ibm:system_x3250_m5_firmware:6.80
-
cpe:2.3:o:ibm:system_x3300_m4_firmware:-
-
cpe:2.3:o:ibm:system_x3300_m4_firmware:6.4
-
cpe:2.3:o:ibm:system_x3300_m4_firmware:6.80
-
cpe:2.3:o:ibm:system_x3500_m4_firmware:-
-
cpe:2.3:o:ibm:system_x3500_m4_firmware:6.4
-
cpe:2.3:o:ibm:system_x3500_m4_firmware:6.80
-
cpe:2.3:o:ibm:system_x3530_m4_firmware:-
-
cpe:2.3:o:ibm:system_x3530_m4_firmware:3.20
-
cpe:2.3:o:ibm:system_x3530_m4_firmware:6.4
-
cpe:2.3:o:ibm:system_x3530_m4_firmware:6.80
-
cpe:2.3:o:ibm:system_x3550_m4_firmware:-
-
cpe:2.3:o:ibm:system_x3550_m4_firmware:6.4
-
cpe:2.3:o:ibm:system_x3550_m4_firmware:6.80
-
cpe:2.3:o:ibm:system_x3630_m4_firmware:-
-
cpe:2.3:o:ibm:system_x3630_m4_firmware:3.20
-
cpe:2.3:o:ibm:system_x3630_m4_firmware:6.4
-
cpe:2.3:o:ibm:system_x3630_m4_firmware:6.80
-
cpe:2.3:o:ibm:system_x3650_m4_bd_firmware:-
-
cpe:2.3:o:ibm:system_x3650_m4_bd_firmware:6.4
-
cpe:2.3:o:ibm:system_x3650_m4_bd_firmware:6.80
-
cpe:2.3:o:ibm:system_x3650_m4_firmware:-
-
cpe:2.3:o:ibm:system_x3650_m4_firmware:6.4
-
cpe:2.3:o:ibm:system_x3650_m4_firmware:6.80
-
cpe:2.3:o:ibm:system_x3650_m4_hd_firmware:-
-
cpe:2.3:o:ibm:system_x3650_m4_hd_firmware:2.40
-
cpe:2.3:o:ibm:system_x3650_m4_hd_firmware:6.4
-
cpe:2.3:o:ibm:system_x3650_m4_hd_firmware:6.80
-
cpe:2.3:o:ibm:system_x3750_m4_firmware:-
-
cpe:2.3:o:ibm:system_x3750_m4_firmware:6.4
-
cpe:2.3:o:ibm:system_x3750_m4_firmware:6.80
-
cpe:2.3:o:ibm:system_x3850_x6_firmware:-
-
cpe:2.3:o:ibm:system_x3850_x6_firmware:6.4
-
cpe:2.3:o:ibm:system_x3850_x6_firmware:6.80
-
cpe:2.3:o:ibm:system_x3950_x6_firmware:-
-
cpe:2.3:o:ibm:system_x3950_x6_firmware:6.4
-
cpe:2.3:o:ibm:system_x3950_x6_firmware:6.80
-
cpe:2.3:o:lenovo:flex_system_x240_m4_firmware:-
-
cpe:2.3:o:lenovo:flex_system_x240_m4_firmware:4.4
-
cpe:2.3:o:lenovo:flex_system_x240_m4_firmware:4.90
-
cpe:2.3:o:lenovo:flex_system_x240_m5_firmware:-
-
cpe:2.3:o:lenovo:flex_system_x240_m5_firmware:4.4
-
cpe:2.3:o:lenovo:flex_system_x240_m5_firmware:4.90
-
cpe:2.3:o:lenovo:flex_system_x280_x6_firmware:-
-
cpe:2.3:o:lenovo:flex_system_x280_x6_firmware:4.4
-
cpe:2.3:o:lenovo:flex_system_x280_x6_firmware:4.90
-
cpe:2.3:o:lenovo:flex_system_x440_m4_firmware:-
-
cpe:2.3:o:lenovo:flex_system_x440_m4_firmware:4.4
-
cpe:2.3:o:lenovo:flex_system_x440_m4_firmware:4.90
-
cpe:2.3:o:lenovo:flex_system_x480_x6_firmware:-
-
cpe:2.3:o:lenovo:flex_system_x480_x6_firmware:4.4
-
cpe:2.3:o:lenovo:flex_system_x480_x6_firmware:4.90
-
cpe:2.3:o:lenovo:flex_system_x880_firmware:-
-
cpe:2.3:o:lenovo:flex_system_x880_firmware:4.4
-
cpe:2.3:o:lenovo:flex_system_x880_firmware:4.90
-
cpe:2.3:o:lenovo:nextscale_nx360_m5_firmware:-
-
cpe:2.3:o:lenovo:nextscale_nx360_m5_firmware:4.4
-
cpe:2.3:o:lenovo:nextscale_nx360_m5_firmware:4.90
-
cpe:2.3:o:lenovo:system_x3250_m6_firmware:-
-
cpe:2.3:o:lenovo:system_x3250_m6_firmware:4.4
-
cpe:2.3:o:lenovo:system_x3250_m6_firmware:4.90
-
cpe:2.3:o:lenovo:system_x3500_m5_firmware:-
-
cpe:2.3:o:lenovo:system_x3500_m5_firmware:4.4
-
cpe:2.3:o:lenovo:system_x3500_m5_firmware:4.90
-
cpe:2.3:o:lenovo:system_x3550_m5_firmware:-
-
cpe:2.3:o:lenovo:system_x3550_m5_firmware:4.4
-
cpe:2.3:o:lenovo:system_x3550_m5_firmware:4.90
-
cpe:2.3:o:lenovo:system_x3650_m5_firmware:-
-
cpe:2.3:o:lenovo:system_x3650_m5_firmware:4.4
-
cpe:2.3:o:lenovo:system_x3650_m5_firmware:4.90
-
cpe:2.3:o:lenovo:system_x3750_m4_firmware:-
-
cpe:2.3:o:lenovo:system_x3750_m4_firmware:4.4
-
cpe:2.3:o:lenovo:system_x3750_m4_firmware:4.90
-
cpe:2.3:o:lenovo:system_x3850_x6_firmware:-
-
cpe:2.3:o:lenovo:system_x3850_x6_firmware:4.4
-
cpe:2.3:o:lenovo:system_x3850_x6_firmware:4.90
-
cpe:2.3:o:lenovo:system_x3950_x6_firmware:-
-
cpe:2.3:o:lenovo:system_x3950_x6_firmware:4.4
-
cpe:2.3:o:lenovo:system_x3950_x6_firmware:4.90