CVSS 3.0
7.5 highCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2019-6157
In various firmware versions of Lenovo System x, the integrated management module II (IMM2)'s first failure data capture (FFDC) includes the web server's private key in the generated log file for support.
Severity
- EPSS
- 1.3% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
- CWE
- CWE-532
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ibm:bladecenter_hs22_firmware
- ibm:bladecenter_hs23_firmware
- ibm:bladecenter_hs23e_firmware
- ibm:flex_system_x220_m4_firmware
- ibm:flex_system_x222_m4_firmware
- ibm:flex_system_x240_m4_firmware
- ibm:flex_system_x280_m4_firmware
- ibm:flex_system_x440_m4_firmware
- ibm:flex_system_x480_m4_firmware
- ibm:flex_system_x880_m4_firmware
- ibm:idataplex_dx360_m4_firmware
- ibm:idataplex_dx360_m4_water_cooled_firmware
- ibm:nextscale_nx360_m4_firmware
- ibm:system_x3100_m4_firmware
- ibm:system_x3100_m5_firmware
- ibm:system_x3250_m4_firmware
- ibm:system_x3250_m5_firmware
- ibm:system_x3300_m4_firmware
- ibm:system_x3500_m4_firmware
- ibm:system_x3530_m4_firmware
- ibm:system_x3550_m4_firmware
- ibm:system_x3630_m4_firmware
- ibm:system_x3650_m4_bd_firmware
- ibm:system_x3650_m4_firmware
- ibm:system_x3650_m4_hd_firmware
- ibm:system_x3750_m4_firmware
- ibm:system_x3850_x6_firmware
- ibm:system_x3950_x6_firmware
- lenovo:flex_system_x240_m4_firmware
- lenovo:flex_system_x240_m5_firmware
- lenovo:flex_system_x280_x6_firmware
- lenovo:flex_system_x440_m4_firmware
- lenovo:flex_system_x480_x6_firmware
- lenovo:flex_system_x880_firmware
- lenovo:nextscale_nx360_m5_firmware
- lenovo:system_x3250_m6_firmware
- lenovo:system_x3500_m5_firmware
- lenovo:system_x3550_m5_firmware
- lenovo:system_x3650_m5_firmware
- lenovo:system_x3750_m4_firmware
- lenovo:system_x3850_x6_firmware
- lenovo:system_x3950_x6_firmware