Vulnerabilities > Lenovo > Nextscale Nx360 M5 Firmware > 4.4

DATE CVE VULNERABILITY TITLE RISK
2019-04-22 CVE-2019-6157 Information Exposure Through Log Files vulnerability in multiple products
In various firmware versions of Lenovo System x, the integrated management module II (IMM2)'s first failure data capture (FFDC) includes the web server's private key in the generated log file for support.
network
low complexity
lenovo ibm CWE-532
5.0
2018-07-26 CVE-2018-9068 Use of Hard-coded Credentials vulnerability in multiple products
The IMM2 First Failure Data Capture function collects management module logs and diagnostic information when a hardware error is detected.
network
low complexity
lenovo ibm CWE-798
5.0