var-201904-0089
Vulnerability from variot
In various firmware versions of Lenovo System x, the integrated management module II (IMM2)'s first failure data capture (FFDC) includes the web server's private key in the generated log file for support. plural Lenovo System x The product contains a vulnerability related to information disclosure from log files.Information may be obtained. LenovoFlexSystemx240M4 and so on are all servers of China Lenovo. A security vulnerability exists in several Lenovo products that originated from the FFDC recording the private key of the web server in a log file. An attacker could exploit the vulnerability to disclose information. There are security vulnerabilities in several Lenovo products. The following products are affected: Lenovo Flex System x240 M4; Flex System x240 M5; Flex System x280 X6; Flex System x440 M4; Flex System x480 X6; Flex System x880; NeXtScale nx360 M5; (ThinkAgile CX2200/4200/4600); System x3650 M5; System x3750 M4; System x3850 X6; System x3950 X6; BladeCenter HS22; BladeCenter HS23; BladeCenter HS23E; Flex System x220 M4; System x280 M4; Flex System x440 M4; Flex System x480 M4; Flex System x880 M4; iDataPlex dx360 M4; iDataPlex dx360 M4 Water Cooled; x3300 M4; System x3500 M4; System x3530 M4; System x3550 M4; System x3630 M4; System x3650 M4;
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201904-0089",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "nextscale nx360 m5",
"scope": null,
"trust": 1.4,
"vendor": "lenovo",
"version": null
},
{
"model": "system x3250 m6",
"scope": "lt",
"trust": 1.0,
"vendor": "lenovo",
"version": "5.30"
},
{
"model": "system x3500 m4",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "7.20"
},
{
"model": "system x3650 m4",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "7.20"
},
{
"model": "flex system x240 m5",
"scope": "lt",
"trust": 1.0,
"vendor": "lenovo",
"version": "5.30"
},
{
"model": "bladecenter hs22",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "7.20"
},
{
"model": "flex system x222 m4",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "7.20"
},
{
"model": "system x3300 m4",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "7.20"
},
{
"model": "system x3250 m5",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "7.20"
},
{
"model": "flex system x220 m4",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "7.20"
},
{
"model": "idataplex dx360 m4 water cooled",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "7.20"
},
{
"model": "system x3550 m4",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "7.20"
},
{
"model": "system x3650 m4 bd",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "7.20"
},
{
"model": "system x3950 x6",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "7.20"
},
{
"model": "nextscale nx360 m4",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "7.20"
},
{
"model": "system x3530 m4",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "7.20"
},
{
"model": "bladecenter hs23",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "7.20"
},
{
"model": "system x3650 m4 hd",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "7.20"
},
{
"model": "system x3500 m5",
"scope": "lt",
"trust": 1.0,
"vendor": "lenovo",
"version": "5.30"
},
{
"model": "system x3950 x6",
"scope": "lt",
"trust": 1.0,
"vendor": "lenovo",
"version": "5.30"
},
{
"model": "flex system x240 m4",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "7.20"
},
{
"model": "system x3650 m5",
"scope": "lt",
"trust": 1.0,
"vendor": "lenovo",
"version": "5.30"
},
{
"model": "flex system x880 m4",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "7.20"
},
{
"model": "system x3630 m4",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "7.20"
},
{
"model": "system x3550 m5",
"scope": "lt",
"trust": 1.0,
"vendor": "lenovo",
"version": "5.30"
},
{
"model": "flex system x240 m4",
"scope": "lt",
"trust": 1.0,
"vendor": "lenovo",
"version": "5.30"
},
{
"model": "flex system x440 m4",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "7.20"
},
{
"model": "flex system x480 m4",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "7.20"
},
{
"model": "system x3250 m4",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "7.20"
},
{
"model": "nextscale nx360 m5",
"scope": "lt",
"trust": 1.0,
"vendor": "lenovo",
"version": "5.30"
},
{
"model": "system x3750 m4",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "7.20"
},
{
"model": "flex system x280 x6",
"scope": "lt",
"trust": 1.0,
"vendor": "lenovo",
"version": "5.30"
},
{
"model": "idataplex dx360 m4",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "7.20"
},
{
"model": "flex system x480 x6",
"scope": "lt",
"trust": 1.0,
"vendor": "lenovo",
"version": "5.30"
},
{
"model": "system x3850 x6",
"scope": "lt",
"trust": 1.0,
"vendor": "lenovo",
"version": "5.30"
},
{
"model": "system x3100 m4",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "7.20"
},
{
"model": "flex system x440 m4",
"scope": "lt",
"trust": 1.0,
"vendor": "lenovo",
"version": "5.30"
},
{
"model": "flex system x280 m4",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "7.20"
},
{
"model": "system x3100 m5",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "7.20"
},
{
"model": "system x3750 m4",
"scope": "lt",
"trust": 1.0,
"vendor": "lenovo",
"version": "5.30"
},
{
"model": "bladecenter hs23e",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "7.20"
},
{
"model": "flex system x880",
"scope": "lt",
"trust": 1.0,
"vendor": "lenovo",
"version": "5.30"
},
{
"model": "system x3850 x6",
"scope": "lt",
"trust": 1.0,
"vendor": "ibm",
"version": "7.20"
},
{
"model": "flex system x240 m4",
"scope": null,
"trust": 0.8,
"vendor": "lenovo",
"version": null
},
{
"model": "flex system x240 m5",
"scope": null,
"trust": 0.8,
"vendor": "lenovo",
"version": null
},
{
"model": "flex system x280 x6",
"scope": null,
"trust": 0.8,
"vendor": "lenovo",
"version": null
},
{
"model": "flex system x440 m4",
"scope": null,
"trust": 0.8,
"vendor": "lenovo",
"version": null
},
{
"model": "flex system x480 x6",
"scope": null,
"trust": 0.8,
"vendor": "lenovo",
"version": null
},
{
"model": "flex system x880",
"scope": null,
"trust": 0.8,
"vendor": "lenovo",
"version": null
},
{
"model": "system x3250 m6",
"scope": null,
"trust": 0.8,
"vendor": "lenovo",
"version": null
},
{
"model": "system x3500 m5",
"scope": null,
"trust": 0.8,
"vendor": "lenovo",
"version": null
},
{
"model": "system x3550 m5",
"scope": null,
"trust": 0.8,
"vendor": "lenovo",
"version": null
},
{
"model": "flex system m4",
"scope": "eq",
"trust": 0.6,
"vendor": "lenovo",
"version": "x240"
},
{
"model": "flex system m5",
"scope": "eq",
"trust": 0.6,
"vendor": "lenovo",
"version": "x240"
},
{
"model": "flex system",
"scope": "eq",
"trust": 0.6,
"vendor": "lenovo",
"version": "x280x6"
},
{
"model": "flex system m4",
"scope": "eq",
"trust": 0.6,
"vendor": "lenovo",
"version": "x440"
},
{
"model": "flex system",
"scope": "eq",
"trust": 0.6,
"vendor": "lenovo",
"version": "x480x6"
},
{
"model": "flex system",
"scope": "eq",
"trust": 0.6,
"vendor": "lenovo",
"version": "x880"
},
{
"model": "system m6",
"scope": "eq",
"trust": 0.6,
"vendor": "lenovo",
"version": "x3250"
},
{
"model": "system m5",
"scope": "eq",
"trust": 0.6,
"vendor": "lenovo",
"version": "x3500"
},
{
"model": "system m5",
"scope": "eq",
"trust": 0.6,
"vendor": "lenovo",
"version": "x3550"
},
{
"model": "system m5",
"scope": "eq",
"trust": 0.6,
"vendor": "lenovo",
"version": "x3650"
},
{
"model": "system m4",
"scope": "eq",
"trust": 0.6,
"vendor": "lenovo",
"version": "x3750"
},
{
"model": "system",
"scope": "eq",
"trust": 0.6,
"vendor": "lenovo",
"version": "x3850x6"
},
{
"model": "system",
"scope": "eq",
"trust": 0.6,
"vendor": "lenovo",
"version": "x3950x6"
},
{
"model": "bladecenter hs22",
"scope": null,
"trust": 0.6,
"vendor": "lenovo",
"version": null
},
{
"model": "bladecenter hs23e",
"scope": null,
"trust": 0.6,
"vendor": "lenovo",
"version": null
},
{
"model": "flex system m4",
"scope": "eq",
"trust": 0.6,
"vendor": "lenovo",
"version": "x220"
},
{
"model": "flex system m4",
"scope": "eq",
"trust": 0.6,
"vendor": "lenovo",
"version": "x222"
},
{
"model": "flex system m4",
"scope": "eq",
"trust": 0.6,
"vendor": "lenovo",
"version": "x480"
},
{
"model": "flex system m4",
"scope": "eq",
"trust": 0.6,
"vendor": "lenovo",
"version": "x880"
},
{
"model": "idataplex dx360 m4",
"scope": null,
"trust": 0.6,
"vendor": "lenovo",
"version": null
},
{
"model": "idataplex dx360 m4 water cooled",
"scope": null,
"trust": 0.6,
"vendor": "lenovo",
"version": null
},
{
"model": "nextscale nx360 m4",
"scope": null,
"trust": 0.6,
"vendor": "lenovo",
"version": null
},
{
"model": "system m4",
"scope": "eq",
"trust": 0.6,
"vendor": "lenovo",
"version": "x3100"
},
{
"model": "system m5",
"scope": "eq",
"trust": 0.6,
"vendor": "lenovo",
"version": "x3100"
},
{
"model": "system m4",
"scope": "eq",
"trust": 0.6,
"vendor": "lenovo",
"version": "x3250"
},
{
"model": "system m5",
"scope": "eq",
"trust": 0.6,
"vendor": "lenovo",
"version": "x3250"
},
{
"model": "system m4",
"scope": "eq",
"trust": 0.6,
"vendor": "lenovo",
"version": "x3300"
},
{
"model": "system m4",
"scope": "eq",
"trust": 0.6,
"vendor": "lenovo",
"version": "x3500"
},
{
"model": "system m4",
"scope": "eq",
"trust": 0.6,
"vendor": "lenovo",
"version": "x3550"
},
{
"model": "system m4",
"scope": "eq",
"trust": 0.6,
"vendor": "lenovo",
"version": "x3630"
},
{
"model": "system m4 bd",
"scope": "eq",
"trust": 0.6,
"vendor": "lenovo",
"version": "x3650"
},
{
"model": "system m4 hd",
"scope": "eq",
"trust": 0.6,
"vendor": "lenovo",
"version": "x3650"
},
{
"model": "flex system m4",
"scope": "eq",
"trust": 0.6,
"vendor": "lenovo",
"version": "x280"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-13089"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-004354"
},
{
"db": "NVD",
"id": "CVE-2019-6157"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:lenovo:flex_system_x240_m4_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:lenovo:flex_system_x240_m5_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:lenovo:flex_system_x280_x6_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:lenovo:flex_system_x440_m4_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:lenovo:flex_system_x480_x6_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:lenovo:flex_system_x880_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:lenovo:nextscale_nx360_m5_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:lenovo:system_x3250_m6_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:lenovo:system_x3500_m5_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:lenovo:system_x3550_m5_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-004354"
}
]
},
"cve": "CVE-2019-6157",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2019-6157",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2019-13089",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "VHN-157592",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:P/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 3.9,
"id": "CVE-2019-6157",
"impactScore": 3.6,
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.8,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "psirt@lenovo.com",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 1.2,
"id": "CVE-2019-6157",
"impactScore": 5.2,
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2019-6157",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "psirt@lenovo.com",
"id": "CVE-2019-6157",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2019-6157",
"trust": 0.8,
"value": "High"
},
{
"author": "CNVD",
"id": "CNVD-2019-13089",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201904-947",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-157592",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-13089"
},
{
"db": "VULHUB",
"id": "VHN-157592"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-004354"
},
{
"db": "CNNVD",
"id": "CNNVD-201904-947"
},
{
"db": "NVD",
"id": "CVE-2019-6157"
},
{
"db": "NVD",
"id": "CVE-2019-6157"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "In various firmware versions of Lenovo System x, the integrated management module II (IMM2)\u0027s first failure data capture (FFDC) includes the web server\u0027s private key in the generated log file for support. plural Lenovo System x The product contains a vulnerability related to information disclosure from log files.Information may be obtained. LenovoFlexSystemx240M4 and so on are all servers of China Lenovo. A security vulnerability exists in several Lenovo products that originated from the FFDC recording the private key of the web server in a log file. An attacker could exploit the vulnerability to disclose information. There are security vulnerabilities in several Lenovo products. The following products are affected: Lenovo Flex System x240 M4; Flex System x240 M5; Flex System x280 X6; Flex System x440 M4; Flex System x480 X6; Flex System x880; NeXtScale nx360 M5; (ThinkAgile CX2200/4200/4600); System x3650 M5; System x3750 M4; System x3850 X6; System x3950 X6; BladeCenter HS22; BladeCenter HS23; BladeCenter HS23E; Flex System x220 M4; System x280 M4; Flex System x440 M4; Flex System x480 M4; Flex System x880 M4; iDataPlex dx360 M4; iDataPlex dx360 M4 Water Cooled; x3300 M4; System x3500 M4; System x3530 M4; System x3550 M4; System x3630 M4; System x3650 M4;",
"sources": [
{
"db": "NVD",
"id": "CVE-2019-6157"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-004354"
},
{
"db": "CNVD",
"id": "CNVD-2019-13089"
},
{
"db": "VULHUB",
"id": "VHN-157592"
}
],
"trust": 2.25
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2019-6157",
"trust": 3.1
},
{
"db": "LENOVO",
"id": "LEN-25667",
"trust": 1.7
},
{
"db": "JVNDB",
"id": "JVNDB-2019-004354",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201904-947",
"trust": 0.7
},
{
"db": "CNVD",
"id": "CNVD-2019-13089",
"trust": 0.6
},
{
"db": "AUSCERT",
"id": "ESB-2019.1427",
"trust": 0.6
},
{
"db": "VULHUB",
"id": "VHN-157592",
"trust": 0.1
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-13089"
},
{
"db": "VULHUB",
"id": "VHN-157592"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-004354"
},
{
"db": "CNNVD",
"id": "CNNVD-201904-947"
},
{
"db": "NVD",
"id": "CVE-2019-6157"
}
]
},
"id": "VAR-201904-0089",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-13089"
},
{
"db": "VULHUB",
"id": "VHN-157592"
}
],
"trust": 1.4043650806666665
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"ICS",
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-13089"
}
]
},
"last_update_date": "2024-11-23T21:24:47.112000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "LEN-25667",
"trust": 0.8,
"url": "https://support.lenovo.com/jp/ja/solutions/len-25667"
},
{
"title": "Patches for several Lenovo product information disclosure vulnerabilities",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/160245"
},
{
"title": "Multiple Lenovo Product security vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=91767"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-13089"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-004354"
},
{
"db": "CNNVD",
"id": "CNNVD-201904-947"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-532",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-157592"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-004354"
},
{
"db": "NVD",
"id": "CVE-2019-6157"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.0,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-6157"
},
{
"trust": 1.7,
"url": "https://support.lenovo.com/solutions/len-25667"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-6157"
},
{
"trust": 0.6,
"url": "http://www.ibm.com/support/docview.wss"
},
{
"trust": 0.6,
"url": "https://www.auscert.org.au/bulletins/79722"
},
{
"trust": 0.6,
"url": "https://www-01.ibm.com/support/docview.wss?uid=ibm10882394"
},
{
"trust": 0.6,
"url": "https://support.lenovo.com/us/en/solutions/len-25667"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-13089"
},
{
"db": "VULHUB",
"id": "VHN-157592"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-004354"
},
{
"db": "CNNVD",
"id": "CNNVD-201904-947"
},
{
"db": "NVD",
"id": "CVE-2019-6157"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2019-13089"
},
{
"db": "VULHUB",
"id": "VHN-157592"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-004354"
},
{
"db": "CNNVD",
"id": "CNNVD-201904-947"
},
{
"db": "NVD",
"id": "CVE-2019-6157"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2019-05-05T00:00:00",
"db": "CNVD",
"id": "CNVD-2019-13089"
},
{
"date": "2019-04-22T00:00:00",
"db": "VULHUB",
"id": "VHN-157592"
},
{
"date": "2019-05-31T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-004354"
},
{
"date": "2019-04-19T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201904-947"
},
{
"date": "2019-04-22T16:29:02.037000",
"db": "NVD",
"id": "CVE-2019-6157"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2019-05-05T00:00:00",
"db": "CNVD",
"id": "CNVD-2019-13089"
},
{
"date": "2019-10-09T00:00:00",
"db": "VULHUB",
"id": "VHN-157592"
},
{
"date": "2019-05-31T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-004354"
},
{
"date": "2019-10-24T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201904-947"
},
{
"date": "2024-11-21T04:46:02.860000",
"db": "NVD",
"id": "CVE-2019-6157"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201904-947"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "plural Lenovo System x Vulnerability related to information leakage from log files in products",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-004354"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "log information leak",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201904-947"
}
],
"trust": 0.6
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.