The vulnerability of the implementation of the status tracking mechanism for the AutoSupport system allows a perpetrator to gain unauthorized access to protected information. This vulnerability is present in the Active IQ Unified Manager, a tool for managing system status and performance in storage systems. This vulnerability is also present in the microsoftware used in Lenovo ThinkSystem DM series storage systems.

The vulnerability of the AutoSupport system monitoring mechanism implemented in the Active IQ Unified Manager software for managing storage system status and performance, as well as in Lenovo ThinkSystem DM series storage systems, is related to insufficient protection of operational data...