Security Bulletin: IBM Integrated Management Module II (IMM2) is affected by information disclosure vulnerability (CVE-2019-6157)

Summary IBM Integrated Management Module II IMM2 has addressed the following information disclosure vulnerability. Vulnerability Details CVEID: CVE-2019-6157 DESCRIPTION: Lenovo System x could allow a local attacker to obtain sensitive information, caused by an issue with including private key...

CVE-2019-6157

In various firmware versions of Lenovo System x, the integrated management module II IMM2's first failure data capture FFDC includes the web server's private key in the generated log file for support...

CVE-2019-6157

CVE-2019-6157 affects Lenovo System x IMM2: FFDC logs may include the web server private key, enabling information disclosure. Affected product lines include IMM2 in System x & BladeCenter; root cause is improper handling of private key data in FFDC logs. IBM IBM X-Force/IBM bulletin and Lenovo L...

IMM2 FFDC includes Private Key - Lenovo Support US

No description provided...

IMM2 FFDC includes Private Key - US

Lenovo Security Advisory: LEN-25667 Potential Impact: Information disclosure Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6157 Summary Description: In Lenovo System x, the integrated management module II IMM2's first failure data capture FFDC includes the web server'...