VULNERABILITY INTELLIGENCE

CVE-2019-6157

CVSS score6.5 MEDIUM
EPSS probability1.35%
CISA KEVNot currently listed
Published2019-04-22
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Description

In various firmware versions of Lenovo System x, the integrated management module II (IMM2)'s first failure data capture (FFDC) includes the web server's private key in the generated log file for support.

Weakness classification

  • nvd@nist.gov: CWE-532

Primary references