CVE-2019-6161

An internal product security audit discovered a session handling vulnerability in the web interface of ThinkAgile CP-SB (Storage Block) BMC in firmware versions prior to 1908.M. This vulnerability allows session IDs to be reused, which could provide unauthorized access to the BMC under certain circumstances. This vulnerability does not affect ThinkSystem XCC, System x IMM2, or other BMCs.
References
Link Resource
https://support.lenovo.com/solutions/LEN-26957 Vendor Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:lenovo:cp_storage_block_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:lenovo:cp_storage_block:-:*:*:*:*:*:*:*

Information

Published : 2019-09-26 09:15

Updated : 2019-10-01 06:38


NVD link : CVE-2019-6161

Mitre link : CVE-2019-6161


JSON object : View

CWE
CWE-384

Session Fixation

Advertisement

dedicated server usa

Products Affected

lenovo

  • cp_storage_block
  • cp_storage_block_firmware