cvedb.io
CVE-2019-6157
MEDIUM · CVSS 6.5
EPSS exploitation probability: 0%
Published 2019-04-22T16:29:02.037 · Last modified 2026-06-17T02:38:41.783

Summary

In various firmware versions of Lenovo System x, the integrated management module II (IMM2)'s first failure data capture (FFDC) includes the web server's private key in the generated log file for support.

Affected products

lenovo — flex_system_x240_m4_firmware

Does this affect you?

Add your gear to cvedb and we'll alert you only when lenovo ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.