CVE-2019-6161

CVE-2019-6161 affects Lenovo/ThinkAgile CP-SB Storage Block BMC. A session-handling vulnerability allows reused session IDs, potentially enabling unauthorized access on firmware versions prior to 1908.M. Affected product: ThinkAgile CP-SB BMC; other BMCs (ThinkSystem XCC, System x IMM2, etc.) are...

ThinkAgile CP-SB (Storage Block) BMC Session Handling Vulnerability - US

Lenovo Security Advisory: LEN-26957 Potential Impact: Unauthorized access Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6161 Summary Description: An internal product security audit discovered a session handling vulnerability in the web interface of ThinkAgile CP-SB...