← CVE Intelligence

CVE-2018-9073

CMM Security Vulnerability PUBLISHED

Description (CNA)

Lenovo Chassis Management Module (CMM) prior to version 2.0.0 utilizes a hardcoded encryption key to protect certain secrets. Possession of the key can allow an attacker that has already compromised the server to decrypt these secrets.

Affected (CNA)

Vendor / productVersions
Lenovo / Chassis Management Module (CMM)affected unspecified before 2.0.0

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.