High

DATE	CVE	VULNERABILITY TITLE	RISK
2019-04-22	CVE-2019-6157	Information Exposure Through Log Files vulnerability in multiple products In various firmware versions of Lenovo System x, the integrated management module II (IMM2)'s first failure data capture (FFDC) includes the web server's private key in the generated log file for support. network low complexity lenovo ibm CWE-532	7.5
2018-07-26	CVE-2018-9068	Use of Hard-coded Credentials vulnerability in multiple products The IMM2 First Failure Data Capture function collects management module logs and diagnostic information when a hardware error is detected. network low complexity lenovo ibm CWE-798	7.5