EUVD-2018-20676

Malware in sbrugna...

Authentication flaw

Lenovo Chassis Management Module CMM prior to version 2.0.0 allows unauthenticated users to retrieve information related to the current authentication configuration settings. Exposed settings relate to password lengths, expiration, and lockout configuration...

CVE-2018-9071 CMM Security Vulnerability

Lenovo Chassis Management Module CMM prior to version 2.0.0 allows unauthenticated users to retrieve information related to the current authentication configuration settings. Exposed settings relate to password lengths, expiration, and lockout configuration...

PT-2018-18832

Name of the Vulnerable Software and Affected Versions Lenovo Chassis Management Module CMM versions prior to 2.0.0 Description The issue allows unauthenticated users to retrieve information related to the current authentication configuration settings. Exposed settings relate to password lengths,...

CVE-2018-9073: Use of Hard-coded Credentials

Lenovo Chassis Management Module CMM prior to version 2.0.0 utilizes a hardcoded encryption key to protect certain secrets. Possession of the key can allow an attacker that has already compromised the server to decrypt these secrets...

CVE-2018-9071: Exposure of Sensitive Information to an Unauthorized Actor

Lenovo Chassis Management Module CMM prior to version 2.0.0 allows unauthenticated users to retrieve information related to the current authentication configuration settings. Exposed settings relate to password lengths, expiration, and lockout configuration...

PT-2018-18834

Name of the Vulnerable Software and Affected Versions Lenovo Chassis Management Module CMM versions prior to 2.0.0 Description The issue concerns the use of a hardcoded encryption key in the Lenovo Chassis Management Module CMM. This key is used to protect certain secrets. If an attacker obtains...